Deprecated: The called constructor method for WP_Widget in author_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in author_post_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in author_custom is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_facebook_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in google_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in youtube_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in widget_tabs is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_Latest_Tweets is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in flickr_photos is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads125_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads120_90_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads120_60_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads120_600_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads120_240_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads160_600_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads300_600_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads250_250_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads300_100_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in ads300_250_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_video_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in posts_list is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in categort_posts is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in authors_posts is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in news_pic is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in comments_avatar is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_text_html is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_social_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in search is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_Author_Bio is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_counter_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in login_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_feedburner_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in review_widget is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_slider is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955

Deprecated: The called constructor method for WP_Widget in tie_soundcloud is deprecated since version 4.3.0! Use __construct() instead. in /home/oneherau/public_html/wp-includes/functions.php on line 4955
How Spy Tech Firms Let Governments See Everything on a Smartphone | One Herald
Home / Technology / How Spy Tech Firms Let Governments See Everything on a Smartphone

How Spy Tech Firms Let Governments See Everything on a Smartphone

“There’s no check on this,” said Bill Marczak, a senior fellow at the Citizen Lab at the University of Toronto’s Munk School of Global Affairs. “Once NSO’s systems are sold, governments can essentially use them however they want. NSO can say they’re trying to make the world a safer place, but they are also making the world a more surveilled place.”

The NSO Group’s capabilities are in higher demand now that companies like Apple, Facebook and Google are using stronger encryption to protect data in their systems, in the process making it harder for government agencies to track suspects.

The NSO Group’s spyware finds ways around encryption by baiting targets to click unwittingly on texts containing malicious links or by exploiting previously undiscovered software flaws. It was taking advantage of three such flaws in Apple software — since fixed — when it was discovered by researchers last month.

Photo

The founders of NSO Group, Omri Lavie, left, and Shalev Hulio. Credit NSO Group

The cyberarms industry typified by the NSO Group operates in a legal gray area, and it is often left to the companies to decide how far they are willing to dig into a target’s personal life and what governments they will do business with. Israel has strict export controls for cyberarms, but the country has never barred the sale of NSO Group technology.

Since it is privately held, not much is known about the NSO Group’s finances, but its business is clearly growing. Two years ago, the NSO Group sold a controlling stake in its business to Francisco Partners, a private equity firm based in San Francisco, for $ 120 million. Nearly a year later, Francisco Partners was exploring a sale of the company for 10 times that amount, according to two people approached by the firm but forbidden to speak about the discussions.

The company’s internal documents detail pitches to countries throughout Europe and multimillion-dollar-contracts with Mexico, which paid the NSO Group more than $ 15 million for three projects over three years, according to internal NSO Group emails dated in 2013. Calls and emails to Mexico’s embassies in San Francisco and Washington were not returned.

Zamir Dahbash, an NSO Group spokesman, said the sale of its spyware was restricted to authorized governments and it was used solely for criminal and terrorist investigations. He declined to comment on whether it would cease selling to the U.A.E. and Mexico after last week’s disclosures.

For the last six years, the NSO Group’s main product, a tracking system called Pegasus, has been used by a growing number of government agencies to target a range of smartphones — including iPhones, Androids, and BlackBerry and Symbian systems — without leaving a trace.

Among the Pegasus system’s capabilities, NSO Group contracts assert, are the abilities to extract text messages, contact lists, calendar records, emails, instant messages and GPS locations. One capability that the NSO Group calls “room tap” can gather sounds in and around the room, using the phone’s own microphone.

Pegasus can use the camera to take snapshots or screen grabs. It can deny the phone access to certain websites and applications, and it can grab search histories or anything viewed with the phone’s web browser. And all of the data can be sent back to the attacker’s server in real time.

In its commercial proposals, the NSO Group claims that its tracking software and hardware can install itself in any number of ways, including “over the air stealth installation,” tailored text messages and emails, through public Wi-Fi hot spots rigged to secretly install NSO Group software, or the old-fashioned way, by spies in person.

Much like a traditional software company, the NSO Group prices its surveillance tools by the number of targets, starting with a flat $ 500,000 installation fee. To spy on 10 iPhone users, NSO charges government agencies $ 650,000; $ 650,000 for 10 Android users; $ 500,000 for five Blackberry users; or $ 300,000 for five Symbian users — on top of the setup fee, according to one commercial proposal.

You can pay for more targets. One hundred additional targets will cost $ 800,000, 50 extra targets cost $ 500,000, 20 extra will cost $ 250,000 and 10 extra costs $ 150,000, according to an NSO Group commercial proposal. There is an annual system maintenance fee of 17 percent of the total price every year thereafter.

What that gets you, NSO Group documents say, is “unlimited access to a target’s mobile devices.” In short, the company says: You can “remotely and covertly collect information about your target’s relationships, location, phone calls, plans and activities — whenever and wherever they are.”

And, its proposal adds, “It leaves no traces whatsoever.”

Continue reading the main story


NYT > Technology

Leave a Reply

Your email address will not be published. Required fields are marked *

*