Polish senators draft law to regulate spyware after anti-Pegasus testimony

Senate commission plans reform after hearing how NSO software used against government critics

Polish senators plan to draft a law that would regulate the use of surveillance technology in the country, after hearing testimony of how the invasive Pegasus spyware has been used against a number of government critics.

Poland is the latest country where Pegasus, a surveillance tool developed by Israeli company NSO, appears to have been used for political purposes. Pegasus allows the operator to take control of a target’s mobile device, to access all data even from encrypted messaging apps, and to turn on audio or video recording.

Continue reading...

Israeli citizens targeted by police using Pegasus spyware, report claims

Investigation alleges Israeli police carried out phone intercepts without court supervision or monitoring of how data was used

The Israeli police allegedly conducted warrantless phone intercepts of Israeli citizens, including politicians and activists, using the NSO group’s controversial Pegasus spyware, according to an investigation by the Israeli business media site Calcalist.

Among those described as having been targets in the report were local mayors, leaders of political protests against the former prime minister Benjamin Netanyahu, and former government employees.

Continue reading...

A data ‘black hole’: Europol ordered to delete vast store of personal data

EU police body accused of unlawfully holding information and aspiring to become an NSA-style mass surveillance agency

The EU’s police agency, Europol, will be forced to delete much of a vast store of personal data that it has been found to have amassed unlawfully by the bloc’s data protection watchdog. The unprecedented finding from the European Data Protection Supervisor (EDPS) targets what privacy experts are calling a “big data ark” containing billions of points of information. Sensitive data in the ark has been drawn from crime reports, hacked from encrypted phone services and sampled from asylum seekers never involved in any crime.

According to internal documents seen by the Guardian, Europol’s cache contains at least 4 petabytes – equivalent to 3m CD-Roms or a fifth of the entire contents of the US Library of Congress. Data protection advocates say the volume of information held on Europol’s systems amounts to mass surveillance and is a step on its road to becoming a European counterpart to the US National Security Agency (NSA), the organisation whose clandestine online spying was revealed by whistleblower Edward Snowden.

Continue reading...

Claims Polish government used spyware is ‘crisis for democracy’, says opposition

Opposition leader Donald Tusk calls for inquiry after watchdog says government’s rivals were targeted by Pegasus spyware

Polish opposition leader Donald Tusk said on Tuesday reports that the government spied on its opponents represented the country’s biggest “crisis for democracy” since the end of communism.

A cybersecurity watchdog last week said the Pegasus spyware had been used to target prominent opposition figures, with Polish media dubbing the scandal a “Polish Watergate”.

Continue reading...

UN-backed investigator into possible Yemen war crimes targeted by spyware

Exclusive: Analysis of Kamel Jendoubi’s mobile phone reveals he was targeted in August 2019

The mobile phone of a UN-backed investigator who was examining possible war crimes in Yemen was targeted with spyware made by Israel’s NSO Group, a new forensic analysis of the device has revealed.

Kamel Jendoubi, a Tunisian who served as the chairman of the now defunct Group of Eminent Experts in Yemen (GEE)– a panel mandated by the UN to investigate possible war crimes – was targeted in August 2019, according to an analysis of his mobile phone by experts at Amnesty International and the Citizen Lab at the University of Toronto.

Continue reading...

Facebook bans seven ‘cyber mercenary’ companies from its platforms

Company will also send warnings to 48,000 people believed to be targeted by malicious activity after investigation

Facebook has banned seven “surveillance-for-hire” companies from its platforms and will send warning notices to 48,000 people who the company believes were targeted by malicious activity, following a months-long investigation into the “cyber mercenary” industry.

The social media company said on Thursday that its investigation had revealed new details about the way the surveillance companies enable their clients to “indiscriminately” target people across the internet to collect intelligence about them, manipulate them – and ultimately compromise their devices.

Black Cube, an Israeli company that gained notoriety after it emerged that the disgraced media mogul and convicted sex offender Harvey Weinstein had hired them to target women who had accused him of abuse. Black Cube rejected Facebook’s claims about its activities.

Cobwebs, another Israeli company that Facebook said enabled its clients to use public websites and dark web sites to trick targets into revealing personal information. The company also reportedly works for US clients, including a local police department in Hartford, Connecticut.

Cytrox, a North Macedonian company that Facebook said enabled its clients to infect targets with malware following phishing campaigns.

Continue reading...

UK spy chief suggests Beijing risks ‘miscalculation’ over west’s resolve

Island’s status and surveillance technology making China ‘single greatest priority’ for MI6

China is at risk of “miscalculating through over-confidence” over Taiwan, said the MI6 head, Richard Moore, in a statement clearly intended to warn Beijing to back off any attempt to seize control of the island.

Giving a rare speech, Britain’s foreign intelligence chief said in London that China was at risk of “believing its own propaganda” and that the country had become “the single greatest priority” for MI6 for the first time in its history.

Continue reading...

Controversial Pegasus spyware faces its day of reckoning | John Naughton

The infamous hacking tool is now at the centre of international lawsuits thanks to a courageous research lab

If you were compiling a list of the most toxic tech companies, Facebook – strangely – would not come out on top. First place belongs to NSO, an outfit of which most people have probably never heard. Wikipedia tells us that “NSO Group is an Israeli technology firm primarily known for its proprietary spyware Pegasus, which is capable of remote zero-click surveillance of smartphones”.

Pause for a moment on that phrase: “remote zero-click surveillance of smartphones”. Most smartphone users assume that the ability of a hacker to penetrate their device relies upon the user doing something careless or naive – clicking on a weblink, or opening an attachment. And in most cases they would be right in that assumption. But Pegasus can get in without the user doing anything untoward. And once in, it turns everything on the device into an open book for whoever deployed the malware.

Continue reading...

‘Amoral 21st-century mercenaries’: problems mount for NSO Group

Israeli spyware firm goes from bad to worse as scathing Apple lawsuit follows US blacklisting

Shalev Hulio, the co-founder of Israel’s NSO Group, was in Washington DC on a mission to try to resuscitate the surveillance company’s battered reputation on Capitol Hill shortly before the news broke that he had probably arrived too late to make a difference.

With little advance warning to its allies in Israel, the Biden administration announced on 3 November that it was putting the spyware maker – one of the most sophisticated cyber-weapons companies in the world – on a US blacklist, citing use of the company’s software by regimes around the world for “transnational repression”.

Continue reading...

Interpol’s president: alleged torturer rises as symbol of UAE soft power

Ahmed Nasser al-Raisi’s election has raised concerns about human rights and the surveillance state

Maj Gen Ahmed Nasser al-Raisi’s ascent through the ranks of the interior ministry in Abu Dhabi is associated with the United Arab Emirates’ transformation into a hi-tech surveillance state.

His personal achievements include a diploma in police management from the University of Cambridge, a doctorate in policing, security and community safety from London Metropolitan University and a medal of honour from Italy.

Continue reading...

Israeli firm’s spyware linked to attacks on websites in UK and Middle East

Toronto-based researchers say new evidence suggests Candiru’s software used to target critics of autocratic regimes

Researchers have found new evidence that suggests spyware made by an Israeli company that was recently blacklisted in the US has been used to target critics of Saudi Arabia and other autocratic regimes, including some readers of a London-based news website.

A report by Toronto-based researchers at ESET, an internet security firm, found links between attacks against high-profile websites in the Middle East and UK, and the Israeli company Candiru, which has been called Israel’s “most mysterious cyberwarfare company”.

Continue reading...

Hacking of activists is latest in long line of cyber-attacks on Palestinians

Analysis: while identity of hackers is not known in this case, Palestinians have long been spied on by Israeli military

The disclosure that Palestinian human rights defenders were reportedly hacked using NSO’s Pegasus spyware will come as little surprise to two groups of people: Palestinians themselves and the Israeli military and intelligence cyber operatives who have long spied on Palestinians.

While it is not known who was responsible for the hacking in this instance, what is very well documented is the role of the Israeli military’s 8200 cyberwarfare unit – known in Hebrew as the Yehida Shmoneh-Matayim – in the widespread spying on Palestinian society.

Continue reading...

US blacklisting of NSO Group shows view of major technology company as a grave threat

Analysis: The question now is what effect the US move will have on Israel and on foreign governments who use NSO’s spyware

The US commerce department’s blacklist is usually reserved for America’s worst enemies, such as Chinese companies that have been accused of aiding human right abuses, and Russians who proliferate biological and chemical weapons programmes.

But on Wednesday, Israel’s NSO Group joined their ranks, marking a rare decision by the Biden administration to include a major technology company that is closely regulated by the Israeli government on its list of entities that threaten US national security.

Continue reading...

Chinese effort to gather ‘micro clues’ on Uyghurs laid bare in report

Authorities using predictive policing and human surveillance on Muslims in Xinjiang, thinktank says

Authorities in the Chinese region of Xinjiang are using predictive policing and human surveillance to gather “micro clues” about Uyghurs and empower neighbourhood informants to ensure compliance at every level of society, according to a report.

The research by the Australian Strategic Policy Institute (ASPI) thinktank detailed Xinjiang authorities’ expansive use of grassroots committees, integrated with China’s extensive surveillance technology, to police their Uyghur neighbours’ movements – and emotions.

Continue reading...

Court suspends Giulio Regeni murder and kidnapping trial

Decision follows hours of deliberation over whether it is fair for four Egyptian security officials to be tried in absentia

A court in Rome has suspended trial proceedings against four Egyptian security officials accused of kidnapping, torturing and murdering the Italian student Giulio Regeni in Cairo, following hours of deliberation over whether it is fair for the men to be tried in absentia.

The trial was returned to a preliminary court, after judges debated for seven hours about whether hearings could continue amid any doubt they were aware of proceedings against them.

Continue reading...

Giulio Regeni: trial of Egyptian security agents charged over death begins in Rome

The accused, all members of the National Security Agency, are being tried in absentia after the researcher’s kidnap and killing in Cairo

A court in Rome has begun the trial of four Egyptian security service officers accused of killing an Italian researcher, Giulio Regeni, five and a half years after his mutilated body was found in a ditch by a road in Cairo.

Italian prosecutors accuse Gen Tariq Saber, Col Aser Ibrahim, Capt Hesham Helmi, and Maj Magdi Abd al-Sharif of the “aggravated kidnapping” of Regeni, while Sharif is also charged with “conspiracy to commit aggravated murder”. Kidnap carries a potential sentence of up to eight years in Italy, while Sharif could receive a life sentence.

Continue reading...

RAF intelligence base linked to US drone strike on Iranian general Qassem Soleimani

Research concludes it ‘was probable’ that Menwith Hill was used to assist in the controversial assassination

Campaigners have called on ministers to explain whether the secretive Menwith Hill intelligence base in Yorkshire is involved in recent drone strike assassinations, after the publication of a report that raises questions about UK involvement in US attacks.

The research concludes it “was probable” that Iranian general Qassem Suleimani was killed in January last year using information obtained from the British site, essentially an outpost of the US National Security Agency (NSA).

Continue reading...

Spyware ‘found on phones of five French cabinet members’

Mediapart claims indicate that devices were targeted by NSO’s Pegasus spyware

Traces of Pegasus spyware were found on the mobile phones of at least five current French cabinet ministers, the investigative website Mediapart has reported, citing multiple anonymous sources and a confidential intelligence dossier.

The allegation comes two months after the Pegasus Project, a media consortium that included the Guardian, revealed that the phone numbers of top French officials, including French president Emmanuel Macron and most of his 20-strong cabinet, appeared in a leaked database at the heart of the investigative project.

Continue reading...

Experts say China’s low-level cyberwar is becoming severe threat

Activity more overt and reckless despite US, British and other political efforts to bring it to a halt

Chinese state-sponsored hacking is at record levels, western experts say, accusing Beijing of engaging in a form of low-level warfare that is escalating despite US, British and other political efforts to bring it to a halt.

There are accusations too that the clandestine activity, which has a focus on stealing intellectual property, has become more overt and more reckless, although Beijing consistently denies sponsoring hacking and accuses critics of hypocrisy.

Continue reading...

Child abuse: Apple urged to roll out image-scanning tool swiftly

Exclusive: privacy concerns ‘must not delay use of neuralMatch algorithm to protect victims of abuse’

Child protection experts from across the world have called on Apple to implement new scanning technologies urgently to detect images of child abuse.

In August, Apple announced plans to use a tool called neuralMatch to scan photos being uploaded to iCloud online storage and compare them to a database of known images of child abuse.

Continue reading...