Follow us on social

Screen-shot-2021-11-18-at-11.33.55-am

Israel lobbies hard to get controversial spy firm off US blacklist

The NSO Group is starting to face consequences for malicious cyber activity tied to its military-grade software, Pegasus.

Analysis | Middle East

The Commerce Department’s Bureau of Industry and Security recently added the NSO Group  — an Israeli cyber intelligence and security firm — to its Entity List, a trade restriction list comprised of companies or items deemed to threaten American national security or foreign policy interests. The decision has put significant strain on the traditionally tight relationship between the United States and Israel, as the Israeli Defense Ministry has stated it would press the Biden administration to remove the firm from the list despite new allegations of foreign governments using software developed by the NSO Group to target journalists, dissidents, and activists.

The NSO Group develops technology for government agencies, and their premiere military-grade spyware is called Pegasus. The NSO Group has fiercely defended its product, claiming it was intended to prevent and investigate crime that has traditionally been invisible to law enforcement due to end-to-end encryption. Yet mounting evidence shows that the company supplied the Pegasus spyware to foreign governments who then used it to conduct what the Commerce Department deemed “transnational repression.”

Government surveillance evokes scenes of old-fashioned bugging and wiretaps, but Pegasus is “extremely sophisticated spying.” When an agency identifies a target, the target will receive a text message with an accompanying link. Once the target clicks on the link, Pegasus software infects their phone and the government agency can access and extract data, contacts, messages, and phone records as well as switch on the microphone and camera to clandestinely record the target.

In late 2020, a Paris-based journalism nonprofit called Forbidden Stories partnered with Amnesty International to release a target list of 50,000 phone numbers. These phone numbers were concentrated in countries that are clients of the NSO Group with a record of citizen surveillance. The Pegasus Project, an investigation released in July 2021 by 17 media outlets in 10 countries coordinated by Forbidden Stories and Amnesty International, connected 37 phone numbers to attempted or successful hacks of journalists, activists, and dissidents and those close to them.

For example, the project found that the spyware had targeted individuals close to Jamal Khashoggi, the Saudi Arabian journalist and Washington Post columnist who was brutally murdered by agents of the Saudi government while at their consulate in Istanbul. Targets included Khashoggi’s son, friends, and the Turkish prosecutor in charge of his murder investigation. Khashoggi’s fiancée was also targeted in the days after his murder.

More recently, the Associated Press reported that Front Line Defenders, an Ireland-based human rights group, found Pegasus spyware on cell phones that belong to six Palestinian activists. Three of those activists are affiliated with groups that the Israeli defense minister controversially designated as terrorist organizations with little evidence. While it is not clear who infected the activists’ phones, the group is certain the spyware belongs to the NSO Group.

This is not the first time the NSO Group has faced scrutiny over its spyware. In 2016 and 2017, Carmen Aristegui, a prominent investigative journalist in Mexico and one of the earliest targets of the Pegasus malware, received dozens of highly personalized messages from numbers pretending to be the U.S. Embassy, colleagues, and her bank and phone company.

In January 2020, the United Nations released a report that concluded Saudi Crown Prince Mohammed bin Salman most likely used Pegasus malware to hack Jeff Bezos’s phone in 2018 “in an effort to influence, if not silence, The Washington Post's reporting on Saudi Arabia.” Last week, the 9th U.S. Circuit Court of Appeals also denied foreign sovereign immunity to the NSO Group, which means WhatsApp, which is owned by Meta, the parent company of Facebook, can sue the company for Pegasus’s alleged role in targeting 1,400 devices belonging to journalists and dissidents through an exploit in the messaging app.

A few weeks before the United Nations released its explosive report, the Q Cyber Technologies, the company name the NSO Group uses in Israel, contracted Mercury Public Affairs, a global strategy firm in Washington, DC to clean up its image. For a mere $120,000 per month, Mercury Public Affairs would consult on the firm’s public, media, and government relations. Mercury Public Affairs also meticulously logged statements attributed to NSO Group spokespeople into the Foreign Agents Registration Act website, a Department of Justice database that tracks the political activities of foreign principals, and their contents are revealing.

From January 2020 through earlier this month when Mercury Public Affairs cut ties with Q Cyber Technologies, the FARA website lists 99 pieces of informational material the firm disseminated on behalf of the NSO Group and its business practices. In July alone, when the Pegasus Project launched, Mercury Public Affairs filed 14 statements attributed to the NSO Group.

The tone of these comments ranged from shocked outrage over the alleged abuses to venomous contempt for the Project, often making a sales pitch in the same breath as its defense. “If and when NSO will receive a credible proof of misuse of its technologies, it will conduct a thorough investigation, as it always had and always will,” one statement from July 2021 insisted, adding, “NSO products are saving lives and helping governments fight crime and terror.” Repeatedly, the informational materials available on the FARA website exhibited this deny-sell-justify pattern: essentially, national security interests trump human rights concerns.

This pattern jumped off the page into reality again last week. The same day the Associated Press revealed that FLD found Pegasus spyware on activists’ phones, the Israeli Defense Ministry announced its campaign to convince the Biden administration that Pegasus is a vital tool for national security. Israel wants the Commerce Department to remove the NSO Group from the Entity List and stated that the Defense Ministry, which oversees the licensing of the software, would tighten supervision on what government agencies have access to Pegasus. The Defense Ministry said it did not know who used Pegasus to target Palestinian phones, however, and the NSO Group refused to confirm who used the software and insisted they cannot access information on alleged targets.

National security has been used to justify bad behavior in our post-9/11 world, but it is in the true interest of security writ large to stop the proliferation of dangerously invasive spyware to governments with a record of human rights abuses and citizen surveillance. The Commerce Department took a bold, necessary step in adding the NSO Group to its Entity List, and the Biden administration needs to back it up.


Analysis | Middle East
 Abdel Fattah al-Burhan Sudan
Top image credit: Sudan's army chief Abdel Fattah al-Burhan gestures to soldiers inside the presidential palace after the Sudanese army said it had taken control of the building, in the capital Khartoum, Sudan March 26, 2025. Sudan Transitional Sovereignty Council/Handout via REUTERS

Saudi Arabia chooses sides in Sudan's civil war

Africa

In the final days of Ramadan, before Mecca's Grand Mosque, Sudan's de facto president and army chief, General Abdel Fattah al-Burhan knelt in prayer beside Saudi Crown Prince Mohammed Bin Salman. Al-Burhan had arrived in the kingdom just two days after his troops dealt a significant blow to the paramilitary Rapid Support Forces (RSF), recapturing the capital Khartoum after two years of civil war. Missing from the frame was the United Arab Emirates (UAE), the Gulf power that has backed al-Burhan’s rivals in Sudan’s civil war with arms, mercenaries, and political cover.

The scene captured the essence of a deepening rift between Saudi Arabia and the UAE — once allies in reshaping the Arab world, now architects of competing visions for Sudan and the region.

For two years, Sudan has been enveloped in chaos. The conflict that erupted in April 2023 between the Sudanese Armed forces (SAF) and the RSF, led by General Mohamed Hamdan Dagalo "Hemedti," has inflicted immense suffering: an estimated 150,000 killed, allegations of mass atrocities staining both sides but particularly the RSF in Darfur, 12 million displaced, and over half the population facing acute food insecurity.

keep readingShow less
Donald Trump Massad Boulos
Top image credit: Republican presidential nominee and former U.S. President Donald Trump is joined by Massad Boulos, who was recently named as a 'senior advisor to the President on Arab and Middle Eastern Affairs,' during a campaign stop at the Great Commoner restaurant in Dearborn, Michigan, U.S., on November 1, 2024. REUTERS/Brian Snyder/File Photo

Trump tasks first time envoy with the most complex Africa conflict

Africa

As the war between the Democratic Republic of the Congo (DRC) and allied militias against the Rwandan-backed M23 rebel group continues, the Trump administration is reportedly tapping Massad Boulos as the State Department’s special envoy to the African Great Lakes region.

In this capacity, Boulos will be responsible for leading the American diplomatic effort to bring long-desired stability to the region and to end a conflict that has been raging in the eastern DRC for decades.

keep readingShow less
Sens. Paul and Merkley to Trump: Are we 'stumbling' into another war?
Top photo credit: Sen. Rand Paul (R-Ky) (Gage Skidmore /Creative Commons) and Sen. Jeff Merkley (D-Ore.) )( USDA photo by Preston Keres)

Sens. Paul and Merkley to Trump: Are we 'stumbling' into another war?

QiOSK

Senators Rand Paul (R-Ky.) and Jeff Merkley (D-Ore.) have co-written a letter to the White House, demanding to know the administration’s strategy behind the now-18 days of airstrikes against the Houthis in Yemen.

The letter calls into question the supposed intent of these strikes “to establish deterrence,” acknowledging that neither the Biden administration’s strikes in October 2023, nor the years-long bombing campaign by Saudi Arabia from 2014 to 2020, were successful in debilitating the military organization's military capabilities.

keep readingShow less

Trump transition

Latest

Newsletter

Subscribe now to our weekly round-up and don't miss a beat with your favorite RS contributors and reporters, as well as staff analysis, opinion, and news promoting a positive, non-partisan vision of U.S. foreign policy.