Follow us on social

Screen-shot-2021-11-18-at-11.33.55-am

Israel lobbies hard to get controversial spy firm off US blacklist

The NSO Group is starting to face consequences for malicious cyber activity tied to its military-grade software, Pegasus.

Analysis | Middle East

The Commerce Department’s Bureau of Industry and Security recently added the NSO Group  — an Israeli cyber intelligence and security firm — to its Entity List, a trade restriction list comprised of companies or items deemed to threaten American national security or foreign policy interests. The decision has put significant strain on the traditionally tight relationship between the United States and Israel, as the Israeli Defense Ministry has stated it would press the Biden administration to remove the firm from the list despite new allegations of foreign governments using software developed by the NSO Group to target journalists, dissidents, and activists.

The NSO Group develops technology for government agencies, and their premiere military-grade spyware is called Pegasus. The NSO Group has fiercely defended its product, claiming it was intended to prevent and investigate crime that has traditionally been invisible to law enforcement due to end-to-end encryption. Yet mounting evidence shows that the company supplied the Pegasus spyware to foreign governments who then used it to conduct what the Commerce Department deemed “transnational repression.”

Government surveillance evokes scenes of old-fashioned bugging and wiretaps, but Pegasus is “extremely sophisticated spying.” When an agency identifies a target, the target will receive a text message with an accompanying link. Once the target clicks on the link, Pegasus software infects their phone and the government agency can access and extract data, contacts, messages, and phone records as well as switch on the microphone and camera to clandestinely record the target.

In late 2020, a Paris-based journalism nonprofit called Forbidden Stories partnered with Amnesty International to release a target list of 50,000 phone numbers. These phone numbers were concentrated in countries that are clients of the NSO Group with a record of citizen surveillance. The Pegasus Project, an investigation released in July 2021 by 17 media outlets in 10 countries coordinated by Forbidden Stories and Amnesty International, connected 37 phone numbers to attempted or successful hacks of journalists, activists, and dissidents and those close to them.

For example, the project found that the spyware had targeted individuals close to Jamal Khashoggi, the Saudi Arabian journalist and Washington Post columnist who was brutally murdered by agents of the Saudi government while at their consulate in Istanbul. Targets included Khashoggi’s son, friends, and the Turkish prosecutor in charge of his murder investigation. Khashoggi’s fiancée was also targeted in the days after his murder.

More recently, the Associated Press reported that Front Line Defenders, an Ireland-based human rights group, found Pegasus spyware on cell phones that belong to six Palestinian activists. Three of those activists are affiliated with groups that the Israeli defense minister controversially designated as terrorist organizations with little evidence. While it is not clear who infected the activists’ phones, the group is certain the spyware belongs to the NSO Group.

This is not the first time the NSO Group has faced scrutiny over its spyware. In 2016 and 2017, Carmen Aristegui, a prominent investigative journalist in Mexico and one of the earliest targets of the Pegasus malware, received dozens of highly personalized messages from numbers pretending to be the U.S. Embassy, colleagues, and her bank and phone company.

In January 2020, the United Nations released a report that concluded Saudi Crown Prince Mohammed bin Salman most likely used Pegasus malware to hack Jeff Bezos’s phone in 2018 “in an effort to influence, if not silence, The Washington Post's reporting on Saudi Arabia.” Last week, the 9th U.S. Circuit Court of Appeals also denied foreign sovereign immunity to the NSO Group, which means WhatsApp, which is owned by Meta, the parent company of Facebook, can sue the company for Pegasus’s alleged role in targeting 1,400 devices belonging to journalists and dissidents through an exploit in the messaging app.

A few weeks before the United Nations released its explosive report, the Q Cyber Technologies, the company name the NSO Group uses in Israel, contracted Mercury Public Affairs, a global strategy firm in Washington, DC to clean up its image. For a mere $120,000 per month, Mercury Public Affairs would consult on the firm’s public, media, and government relations. Mercury Public Affairs also meticulously logged statements attributed to NSO Group spokespeople into the Foreign Agents Registration Act website, a Department of Justice database that tracks the political activities of foreign principals, and their contents are revealing.

From January 2020 through earlier this month when Mercury Public Affairs cut ties with Q Cyber Technologies, the FARA website lists 99 pieces of informational material the firm disseminated on behalf of the NSO Group and its business practices. In July alone, when the Pegasus Project launched, Mercury Public Affairs filed 14 statements attributed to the NSO Group.

The tone of these comments ranged from shocked outrage over the alleged abuses to venomous contempt for the Project, often making a sales pitch in the same breath as its defense. “If and when NSO will receive a credible proof of misuse of its technologies, it will conduct a thorough investigation, as it always had and always will,” one statement from July 2021 insisted, adding, “NSO products are saving lives and helping governments fight crime and terror.” Repeatedly, the informational materials available on the FARA website exhibited this deny-sell-justify pattern: essentially, national security interests trump human rights concerns.

This pattern jumped off the page into reality again last week. The same day the Associated Press revealed that FLD found Pegasus spyware on activists’ phones, the Israeli Defense Ministry announced its campaign to convince the Biden administration that Pegasus is a vital tool for national security. Israel wants the Commerce Department to remove the NSO Group from the Entity List and stated that the Defense Ministry, which oversees the licensing of the software, would tighten supervision on what government agencies have access to Pegasus. The Defense Ministry said it did not know who used Pegasus to target Palestinian phones, however, and the NSO Group refused to confirm who used the software and insisted they cannot access information on alleged targets.

National security has been used to justify bad behavior in our post-9/11 world, but it is in the true interest of security writ large to stop the proliferation of dangerously invasive spyware to governments with a record of human rights abuses and citizen surveillance. The Commerce Department took a bold, necessary step in adding the NSO Group to its Entity List, and the Biden administration needs to back it up.


Analysis | Middle East
Havana, Cuba
Top Image Credit: Havana, Cuba, 2019. (CLWphoto/Shutterstock)

Trump lifted sanctions on Syria. Now do Cuba.

North America

President Trump’s new National Security Presidential Memorandum (NSPM) on Cuba, announced on June 30, reaffirms the policy of sanctions and hostility he articulated at the start of his first term in office. In fact, the new NSPM is almost identical to the old one.

The policy’s stated purpose is to “improve human rights, encourage the rule of law, foster free markets and free enterprise, and promote democracy” by restricting financial flows to the Cuban government. It reaffirms Trump’s support for the 1996 Cuban Liberty and Democratic Solidarity Act, which explicitly requires regime change — that Cuba become a multiparty democracy with a free market economy (among other conditions) before the U.S. embargo will be lifted.

keep readingShow less
SPD Germany Ukraine
Top Photo: Lars Klingbeil (l-r, SPD), Federal Minister of Finance, Vice-Chancellor and SPD Federal Chairman, and Bärbel Bas (SPD), Federal Minister of Labor and Social Affairs and SPD Party Chairwoman, bid farewell to the members of the previous Federal Cabinet Olaf Scholz (SPD), former Federal Chancellor, Nancy Faeser, Saskia Esken, SPD Federal Chairwoman, Karl Lauterbach, Svenja Schulze and Hubertus Heil at the SPD Federal Party Conference. At the party conference, the SPD intends to elect a new executive committee and initiate a program process. Kay Nietfeld/dpa via Reuters Connect

Does Germany’s ruling coalition have a peace problem?

Europe

Surfacing a long-dormant intra-party conflict, the Friedenskreise (peace circles) within the Social Democratic Party of Germany has published a “Manifesto on Securing Peace in Europe” in a stark challenge to the rearmament line taken by the SPD leaders governing in coalition with the conservative CDU-CSU under Chancellor Friedrich Merz.

Although the Manifesto clearly does not have broad support in the SPD, the party’s leader, Deputy Chancellor and Finance Minister Lars Klingbeil, won only 64% support from the June 28-29 party conference for his performance so far, a much weaker endorsement than anticipated. The views of the party’s peace camp may be part of the explanation.

keep readingShow less
Trump and Putin on phone
Top photo credit: Donald Trump (White House photo) and Vladimir Putin (Office of the Russian Federation President)
US-Russia talks: The rubber finally hits the road

Good, bad and ugly: Impact of US Iran strikes on Russia war talks

Europe

To a considerable degree, President Donald Trump won the presidency in 2024 because voters embraced his message of keeping America out of protracted conflicts and his promise to end the war in Ukraine.

The administration has made substantial operational headway, particularly in reopening stable channels for dialogue with Russia, but it has proven difficult to arrive at a framework for a negotiated settlement that enjoys buy-in from all the stakeholders — Ukraine, Russia, and Europe.

keep readingShow less

LATEST

QIOSK

Newsletter

Subscribe now to our weekly round-up and don't miss a beat with your favorite RS contributors and reporters, as well as staff analysis, opinion, and news promoting a positive, non-partisan vision of U.S. foreign policy.