Fears mount that Cop27 app could be used by Egypt to surveil regime’s critics

Cybersecurity experts warn that official Cop27 climate app requires access to a user’s location, photos and even emails

There are mounting fears over the surveillance of delegates at the Cop27 climate talks in Egypt, with cybersecurity experts warning that the official app for the talks requires access to a user’s location, photos and even emails upon downloading it.

The revelation, as more than 25,000 heads of state, diplomats, negotiators, journalists and activists from around the world gather at the climate summit that starts in Sharm el-Sheikh on Sunday, has raised concerns that Egypt’s authoritarian regime will be able to use an official platform for a United Nations event to track and harass attendees and critical domestic voices.

Continue reading...

Ukraine arms manufacturer charged with treason over bugged phone calls

Vyacheslav Boguslaev allegedly said he ‘completely understands’ why factory was bombed by Russia

Alleged recordings of the head of a major Ukrainian aircraft manufacturer accused of aiding the Russian military – saying he “completely understands” why a Russian missile was fired at his factory – have been released by Kyiv’s security services after his arrest at the weekend.

Vyacheslav Boguslaev, the president of Motor Sich, has been charged with treason after a raid at the weekend on his home in the southern Ukrainian city of Zaporizhzhia. The manufacturing heavyweight is suspected of selling engines – before and after the invasion – for Russian attack helicopters that have been used extensively against Ukrainian troops.

Continue reading...

No signs Russia is preparing to use nuclear weapon, says GCHQ boss

UK spy chief says Kremlin does not appear to be engaged in preliminary steps despite Putin’s threats

The head of GCHQ has said the UK spy agency has not seen any indicators that Russia is preparing to use a tactical nuclear weapon in or around Ukraine despite recent bellicose statements from Vladimir Putin.

Jeremy Fleming, speaking on Tuesday morning, said it was one of GCHQ’s tasks to monitor whether the Kremlin was taking any of the preliminary steps needed before a tactical weapon was being made ready.

Continue reading...

Mexico: reporters and activists hacked with NSO spyware despite assurances

Country’s current government had sworn it would no longer use the hacking software

Journalists and human rights defenders in Mexico were hacked using spyware made by Israel’s NSO Group as recently as 2021, even after the country’s current government swore it was no longer going to use the hacking software, new research has found.

The alleged victims of the spyware include two journalists who report on issues related to official corruption and a prominent human rights defenders, according to digital rights researchers at R3D (Red en Defensa de los Derechos Digitales) and The Citizen Lab at the University of Toronto, which tracks such infections.

Continue reading...

Iranian authorities plan to use facial recognition to enforce new hijab law

Government says it will use technology on public transport in crackdown on women’s dress

The Iranian government is planning to use facial recognition technology on public transport to identify women who are not complying with a strict new law on wearing the hijab, as the regime continues its increasingly punitive crackdown on women’s dress.

The secretary of Iran’s Headquarters for Promoting Virtue and Preventing Vice, Mohammad Saleh Hashemi Golpayegani, announced in a recent interview that the government was planning to use surveillance technology against women in public places following a new decree signed by the country’s hardline president, Ebrahim Raisi, on restricting women’s clothing.

Continue reading...

CEO of Israeli Pegasus spyware firm NSO to step down

CEO Shalev Hulio is stepping down as part of NSO reorganisation that will see it focus on sales in Nato member countries

Israel’s NSO Group, which makes the globally controversial Pegasus spyware said on Sunday its CEO Shalev Hulio would step down as part of a reorganisation.

The indebted, privately owned company also said it would focus sales on countries belonging to the Nato alliance.

Continue reading...

British judge rules dissident can sue Saudi Arabia for Pegasus hacking

Ghanem Almasarir’s victory opens way for other hacking victims in UK to bring cases against foreign governments

A British judge has ruled that a case against the kingdom of Saudi Arabia brought by a dissident satirist who was targeted with spyware can proceed, a decision that has been hailed as precedent-setting and one that could allow other hacking victims in Britain to sue foreign governments who order such attacks.

The case against Saudi Arabia was brought by Ghanem Almasarir, a prominent satirist granted asylum in the UK, who is a frequent critic of the Saudi royal family.

Continue reading...

Saudi snitching app appears to have been used against jailed Leeds student

‘Terrifying tool’ under scrutiny as Salma al-Shehab’s tweets suggest widely available phone app was used to report her

The Saudi woman who was sentenced to 34 years in prison for a tweet appears to have been denounced to Saudi authorities through a crime-reporting app that users in the kingdom can download to Apple and Android phones.

A review of Leeds PhD student Salma al-Shehab’s tweets and interactions shows she was messaged by a person using a Saudi account on 15 November, 2020 after she posted a mildly critical tweet in response to a Saudi government post about a new public transportation contract.

Continue reading...

Coalition used private contractor to collect intelligence on Nauru asylum seekers

Exclusive: asylum seekers in the offshore detention centre who had contact with Australian journalists, lawyers and advocates were closely watched, documents reveal

The Australian government used private security contractors to collect intelligence on asylum seekers on Nauru, singling out those who were speaking to journalists, lawyers and refugee advocates, internal documents from 2016 reveal.

Intelligence officers working for Wilson Security compiled fortnightly reports about asylum seekers “of interest”, including individuals flagged as having “links with [Australian] media”, “contact with lawyers in Australia” or “contacts with Australian advocates”.

Continue reading...

UK cybersecurity chiefs back plan to scan phones for child abuse images

Heads of GCHQ and NCSC say client-side scanning could protect children and privacy at the same time

Tech companies should move ahead with controversial technology that scans for child abuse imagery on users’ phones, the technical heads of GCHQ and the UK’s National Cybersecurity Centre have said.

So-called “client-side scanning” would involve service providers such as Facebook or Apple building software that monitors communications for suspicious activity without needing to share the contents of messages with a centralised server.

Continue reading...

‘Asleep at the wheel’: Canada police’s spyware admission raises alarm

Experts warn that RCMP document detailing covert surveillance of Canadians’ mobile devices highlights lax government oversight

An admission from Canada’s national police force that it routinely uses powerful spyware to surveil citizens has prompted concern from experts, who warn the country is “asleep at the wheel” when it comes to regulating and reining in use of the technology.

During a parliamentary session in late June, the Royal Canadian Mounted Police submitted a document, first reported in Politico, outlining how a special investigative team covertly infiltrates the mobile devices of Canadians. The tools, which have been used on at least 10 investigations between 2018 and 2020, give the police access to text messages, email, photos, videos, audio files, calendar entries and financial records. The software can also remotely turn on the camera and microphone of a suspect’s phone or laptop.

Continue reading...

NSW police accused of ‘oppressive’ tactics against subjects on secretive blacklist

Lawyers say the ‘preventive policing’ suspect target management plan, which disproportionately focuses on Indigenous youth, uses potentially unlawful tactics

The New South Wales police have been accused of using “oppressive” and potentially unlawful tactics on subjects of a secretive blacklist disproportionately used to target young Indigenous people.

Documents released under a parliamentary order have for the first time revealed how police in the state are instructed to use the suspect target management plan, or STMP, an opaque tool previously found to have utilised “unreasonable” and “unjust” tactics against its targets.

Continue reading...

US defence contractor in talks to take over NSO Group’s hacking technology

Deal – which would require approval from US and Israel – would give L3Harris control over controversial Pegasus tool

The US defence contractor L3Harris is in talks to take over NSO Group’s surveillance technology, in a possible deal that would give an American company control over one of the world’s most sophisticated and controversial hacking tools.

Multiple sources confirmed that discussions were centred on a sale of the Israeli company’s core technology – or code – as well as a possible transfer of NSO personnel to L3Harris. But any agreement still faces significant hurdles, including requiring the blessing of the US and Israeli governments, which have not yet given the green light to a deal.

Continue reading...

China offers citizens cash and ‘spiritual rewards’ for spying tipoffs

State security ministry trying to motivate the public, says state media, as it claims foreign threats have risen

Chinese citizens can get cash rewards of more than 100,000 yuan (£12,000) and special certificates for providing tipoffs about suspected foreign spies and breaches of national security, under measures introduced by the country’s ministry of state security this week.

Rewards for exposing foreign espionage activities or other security violations have existed for years in China. The new measures, according to a state media outlet, are aimed at standardising rewards and motivating the public at a time of intensifying “threats” from foreign intelligence agencies and other quarters.

Continue reading...

Over 200 Spanish mobile numbers ‘possible targets of Pegasus spyware’

Data leak reveals scale of potential surveillance by NSO Group client believed to be Morocco

More than 200 Spanish mobile numbers were selected as possible targets for surveillance by an NSO Group client believed to be Morocco, according to the data leak at the heart of the Pegasus project.

Details of the scale of the apparent targeting came as Spain’s highest criminal court opened an investigation into how the mobile phones of the prime minister, Pedro Sánchez, and the defence minister, Margarita Robles, came to be infected with Pegasus spyware last year.

Continue reading...

Spanish prime minister’s phone ‘targeted with Pegasus spyware’

Minister for presidency says ‘illicit’ targeting will be investigated by Spain’s highest criminal court

The Spanish government has said the mobile phones of the prime minister, Pedro Sánchez, and the defence minister, Margarita Robles, were both infected last year with the Pegasus spyware that its manufacturers claim is available only to state agencies.

In a hastily convened press conference on Monday morning, Félix Bolaños, the minister for the presidency, said Sánchez’s phone was targeted in May and June 2021, while Robles’s was targeted in June 2021. Data was extracted from both phones.

Continue reading...

No 10 suspected of being target of NSO spyware attack, Boris Johnson ‘told’

No 10 subjected to UAE-linked spyware attack, says report, but Israeli firm suggests allegations are false

Boris Johnson has been told his Downing Street office has been targeted with “multiple” suspected infections using Pegasus, the sophisticated hacking software that can turn a phone into a remote listening device, it was claimed on Monday.

A report released by Citizen Lab at the University of Toronto said the United Arab Emirates was suspected of orchestrating spyware attacks on No 10 in 2020 and 2021.

Continue reading...

Catalan leaders targeted using NSO spyware, say cybersecurity experts

Victims said to include Pere Aragonès and Carles Puigdemont, but Israeli firm suggests claims are false

Dozens of pro-independence Catalan figures, including the president of the north-eastern Spanish region and three of his predecessors, have been targeted using NSO Group’s Pegasus spyware, according to a report from cybersecurity experts.

The research published on Monday by Citizen Lab, considered among the world’s leading experts in detecting digital attacks, said victims of the mobile phone targeting included Pere Aragonès, who has led Catalonia since last year, as well as the former regional presidents Quim Torra, Carles Puigdemont and Artur Mas.

Continue reading...

Victim’s iPhone hacked by Pegasus spyware weeks after Apple sued NSO

Quartet targeted by clients – thought to be Jordanian government agencies – of Israeli company even after Apple sued in November

New evidence has revealed that an Apple iPhone was successfully hacked by a government user of NSO Group’s Pegasus spyware in December, weeks after the technology giant sued the Israeli company in a US court and called for it to be banned from “harming individuals” using Apple products.

A report published on Tuesday by security researchers at Front Line Defenders (FLD) and Citizen Lab at the University of Toronto found that phones belonging to four Jordanian human rights defenders, lawyers and journalists were hacked by government clients of NSO – which appear to be Jordanian government agencies – from August 2019 to December 2021.

Continue reading...

Twitter launches privacy-protected site on dark web to bypass Russia’s block

The Tor-friendly site follows moves by Facebook and BBC who also had their platforms restricted on state-owned media

Twitter has launched a privacy-protected version of its site to bypass surveillance and censorship after Russia restricted access to its service in the country.

Russia has blocked access to Facebook and has limited Twitter in an attempt to try to restrict the flow of information about its war in Ukraine. Both companies have said they are working on restoring access to people inside Russia even as they restrict the country’s state media from their services.

Continue reading...