Surveillance campaigns use commercial surveillance tools to exploit long-known telecom vulnerabilities