An Amnesty International employee has been targeted with Israeli-made surveillance software, the human rights group said Wednesday, adding to a growing number of examples of Israeli technology being used to spy on human rights workers and opposition figures in the Middle East and beyond.
In a 20-page report, Amnesty outlined how it thinks a hacker tried to break into an unidentified staff member’s smartphone in early June by baiting the employee with a WhatsApp message about a protest in front of the Saudi Embassy in Washington.
Like many other Israeli startups in the security field, NSO was founded in 2010 by three veterans of the army’s premier signals intelligence unit, 8200: Niv Carmi, Omri Lavie and Shalev Hulio. They started work on Pegasus, which remains NSO’s only product, immediately after founding the company.
The software can infect cellphones, allowing someone to record calls, remotely access the device’s camera, see text messages, obtain GPS coordinates, and more. The software can be remotely installed onto any mobile device without the owner’s knowledge.
The London-based human rights organization said it traced the malicious link in the message to a network of sites tied to the NSO Group, an Israeli surveillance company implicated in a series of digital break-in attempts, including a campaign to compromise proponents of a soda tax in Mexico and an effort to hack into the phone of an Arab dissident that prompted an update to Apple’s operating system.
Keep updated: Sign up to our newsletter
Please enter a valid email address
Thank you for signing up.
We’ve got more newsletters we think you’ll find interesting.
Oops. Something went wrong.
Please try again later.
The email address you have provided is already registered.
>> The dark side of Israeli technology: Six takes on the sale of cyberattack firm NSO ■ NSO employee ‘stole’ classified Israeli cyberweapons to sell on darknet ■ Goodbye Uzi, hello Big Brother: The Israelis arming the world with sophisticated cyber-weapons
Joshua Franco, Amnesty’s head of technology and human rights, said the latest hacking attempt was emblematic of the increased digital risk faced by activists worldwide.
"This is the new normal for human rights defenders," Franco said.
NSO said in a written statement that its product was "intended to be used exclusively for the investigation and prevention of crime and terrorism" and that allegations of wrongdoing would be investigated. In response to a series of written questions, the company said past allegations of customer misuse had, in an undisclosed number of cases, led to the termination of contracts.Amnesty’s findings were corroborated by internet watchdog Citizen Lab, which has been tracking NSO spyware for two years and is based at the University of Toronto’s Munk School of Global Affairs.
In its own report being released Wednesday, Citizen Lab said it so far had counted some 175 targets of NSO spyware worldwide, including 150 people in Panama identified as part of a massive domestic espionage scandal swirling around the country’s former president.
The Amnesty International report said the organization identified a second human rights activist, in Saudi Arabia, who was targeted in a similar way to its staffer. Citizen Lab said it found traces of similar hacking attempts tied to Qatar or Saudi, hinting at the use of the Israeli spyware elsewhere in the Gulf.
Any possible use of Israeli technology to police dissent in the Arab world could raise uncomfortable questions both for Israel, which still sees itself as a bastion of democracy in the region, and for countries with no formal diplomatic ties to the Jewish state.
For Amnesty’s Franco, it was a sign of an out-of-control trade in high-tech surveillance tools.
"This is a huge market that’s completely opaque and under-regulated," he said.