Follow us on social

Screen-shot-2021-11-18-at-11.33.55-am

Israel lobbies hard to get controversial spy firm off US blacklist

The NSO Group is starting to face consequences for malicious cyber activity tied to its military-grade software, Pegasus.

Analysis | Middle East

The Commerce Department’s Bureau of Industry and Security recently added the NSO Group  — an Israeli cyber intelligence and security firm — to its Entity List, a trade restriction list comprised of companies or items deemed to threaten American national security or foreign policy interests. The decision has put significant strain on the traditionally tight relationship between the United States and Israel, as the Israeli Defense Ministry has stated it would press the Biden administration to remove the firm from the list despite new allegations of foreign governments using software developed by the NSO Group to target journalists, dissidents, and activists.

The NSO Group develops technology for government agencies, and their premiere military-grade spyware is called Pegasus. The NSO Group has fiercely defended its product, claiming it was intended to prevent and investigate crime that has traditionally been invisible to law enforcement due to end-to-end encryption. Yet mounting evidence shows that the company supplied the Pegasus spyware to foreign governments who then used it to conduct what the Commerce Department deemed “transnational repression.”

Government surveillance evokes scenes of old-fashioned bugging and wiretaps, but Pegasus is “extremely sophisticated spying.” When an agency identifies a target, the target will receive a text message with an accompanying link. Once the target clicks on the link, Pegasus software infects their phone and the government agency can access and extract data, contacts, messages, and phone records as well as switch on the microphone and camera to clandestinely record the target.

In late 2020, a Paris-based journalism nonprofit called Forbidden Stories partnered with Amnesty International to release a target list of 50,000 phone numbers. These phone numbers were concentrated in countries that are clients of the NSO Group with a record of citizen surveillance. The Pegasus Project, an investigation released in July 2021 by 17 media outlets in 10 countries coordinated by Forbidden Stories and Amnesty International, connected 37 phone numbers to attempted or successful hacks of journalists, activists, and dissidents and those close to them.

For example, the project found that the spyware had targeted individuals close to Jamal Khashoggi, the Saudi Arabian journalist and Washington Post columnist who was brutally murdered by agents of the Saudi government while at their consulate in Istanbul. Targets included Khashoggi’s son, friends, and the Turkish prosecutor in charge of his murder investigation. Khashoggi’s fiancée was also targeted in the days after his murder.

More recently, the Associated Press reported that Front Line Defenders, an Ireland-based human rights group, found Pegasus spyware on cell phones that belong to six Palestinian activists. Three of those activists are affiliated with groups that the Israeli defense minister controversially designated as terrorist organizations with little evidence. While it is not clear who infected the activists’ phones, the group is certain the spyware belongs to the NSO Group.

This is not the first time the NSO Group has faced scrutiny over its spyware. In 2016 and 2017, Carmen Aristegui, a prominent investigative journalist in Mexico and one of the earliest targets of the Pegasus malware, received dozens of highly personalized messages from numbers pretending to be the U.S. Embassy, colleagues, and her bank and phone company.

In January 2020, the United Nations released a report that concluded Saudi Crown Prince Mohammed bin Salman most likely used Pegasus malware to hack Jeff Bezos’s phone in 2018 “in an effort to influence, if not silence, The Washington Post's reporting on Saudi Arabia.” Last week, the 9th U.S. Circuit Court of Appeals also denied foreign sovereign immunity to the NSO Group, which means WhatsApp, which is owned by Meta, the parent company of Facebook, can sue the company for Pegasus’s alleged role in targeting 1,400 devices belonging to journalists and dissidents through an exploit in the messaging app.

A few weeks before the United Nations released its explosive report, the Q Cyber Technologies, the company name the NSO Group uses in Israel, contracted Mercury Public Affairs, a global strategy firm in Washington, DC to clean up its image. For a mere $120,000 per month, Mercury Public Affairs would consult on the firm’s public, media, and government relations. Mercury Public Affairs also meticulously logged statements attributed to NSO Group spokespeople into the Foreign Agents Registration Act website, a Department of Justice database that tracks the political activities of foreign principals, and their contents are revealing.

From January 2020 through earlier this month when Mercury Public Affairs cut ties with Q Cyber Technologies, the FARA website lists 99 pieces of informational material the firm disseminated on behalf of the NSO Group and its business practices. In July alone, when the Pegasus Project launched, Mercury Public Affairs filed 14 statements attributed to the NSO Group.

The tone of these comments ranged from shocked outrage over the alleged abuses to venomous contempt for the Project, often making a sales pitch in the same breath as its defense. “If and when NSO will receive a credible proof of misuse of its technologies, it will conduct a thorough investigation, as it always had and always will,” one statement from July 2021 insisted, adding, “NSO products are saving lives and helping governments fight crime and terror.” Repeatedly, the informational materials available on the FARA website exhibited this deny-sell-justify pattern: essentially, national security interests trump human rights concerns.

This pattern jumped off the page into reality again last week. The same day the Associated Press revealed that FLD found Pegasus spyware on activists’ phones, the Israeli Defense Ministry announced its campaign to convince the Biden administration that Pegasus is a vital tool for national security. Israel wants the Commerce Department to remove the NSO Group from the Entity List and stated that the Defense Ministry, which oversees the licensing of the software, would tighten supervision on what government agencies have access to Pegasus. The Defense Ministry said it did not know who used Pegasus to target Palestinian phones, however, and the NSO Group refused to confirm who used the software and insisted they cannot access information on alleged targets.

National security has been used to justify bad behavior in our post-9/11 world, but it is in the true interest of security writ large to stop the proliferation of dangerously invasive spyware to governments with a record of human rights abuses and citizen surveillance. The Commerce Department took a bold, necessary step in adding the NSO Group to its Entity List, and the Biden administration needs to back it up.

Analysis | Middle East
US lifts ban on Neo-Nazi linked Azov Brigade in Ukraine

The Idea of the Nation symbol used by the 12th Azov Assault Brigade of Ukraines National Guard is pictured during a rally held in celebration of the 10th anniversary of the units foundation, Zaporizhzhia, southeastern Ukraine. Zaporizhzhia, Ukraine, on May 05, 2024. Photo by Dmytro Smolienko/Ukrinform/ABACAPRESS.COM

US lifts ban on Neo-Nazi linked Azov Brigade in Ukraine

QiOSK

The State Department announced that it has lifted its ban on the use of American weapons by the notorious Azov Brigade in Ukraine, an ultra-nationalist outfit widely described as “neo-fascist," even "neo-Nazi."

The group was initially formed in 2014 as a volunteer militia to fight against Russian-backed Ukrainian separatists in the eastern Donbas region, and later incorporated into the National Guard of Ukraine, under the purview of the Interior Ministry.

keep readingShow less
Senegal's new president is anything but a lackey for the West

Senegal's President Bassirou Diomaye Faye shakes hands with Burkina Faso's junta leader Captain Ibrahim Traore upon his arrival in Ouagadougou, Burkina Faso May 30, 2024. Senegal's Presidency/Handout via REUTERS

Senegal's new president is anything but a lackey for the West

Africa

In Senegal, February and March brought tension as then-President Macky Sall, facing a term limit, postponed scheduled elections and seemed poised to remain in power past the expiration of his mandate.

Street protests and outcry from at home and abroad forced Sall’s hand.

keep readingShow less
Could a reformist actually win the Iranian presidential election?

Masoud Pezeshkian, a member of parliament speaks at a press conference after registering as a candidate for the presidential election at the Interior Ministry, in Tehran, Iran June 1, 2024. Majid Asgaripour/WANA (West Asia News Agency) via REUTERS

Could a reformist actually win the Iranian presidential election?

Middle East

Iran’s presidential election, necessitated by the death in a helicopter accident of President Ebrahim Raisi May 19, will be held June 28. Under Iran’s constitution, early elections for a successor must take place within 50 days after the previous president has either died or resigned, or was impeached and removed from office.

Over 80 people, mostly previous and current officials, registered with the Ministry of Interior as candidates. The Guardian Council, a constitutional body, vets all candidates for national elections. On Sunday June 9, the Council announced a list of six eligible candidates. Of the six, five are from the ranks of the hardline and conservative factions, and were widely expected to qualify, while the sixth candidate, a reformist, is a surprise.

keep readingShow less

Israel-Gaza Crisis

Latest