> networks don't care as long as they get their cut.
Pretty clear this is the case, almost all of it could be stopped overnight with a simple whitelist to people you know and a blocklist of countries and regions where you’ll never ever need to take a call from.
...and perfectly legal services too, e.g. joinmassive.com, brightdata, etc.
(they're used for gathering listing data from e-commerce sites, job boards, etc.)
They do this so they are harder to track & block. If they were sending over Wifi then they have to hide the IP, so they have to use VPNs, which are often blocked, etc. But with their solution they have a standard SIM on the standard cellular network, so it's nearly indistinquishable from a regular cellphone.
I'm a little surprised that a behavioral analysis didn't flag these anyway. Probably did, just the networks don't care as long as they get their cut.