Please ensure Javascript is enabled for purposes of website accessibility
Report: Gov't Spyware Targets Phones of Al-Jazeera Reporters
gvw_ap_news
By Associated Press
Published 4 years ago on
December 21, 2020

Share

DUBAI, United Arab Emirates — Dozens of journalists at Al-Jazeera, the Qatari state-owned media company, have been targeted by advanced spyware in an attack likely linked to the governments of Saudi Arabia and the United Arab Emirates, a cybersecurity watchdog said Sunday.

Citizen Lab at the University of Toronto said it traced malware that infected the personal phones of 36 journalists, producers, anchors and executives at Al-Jazeera back to the Israel-based NSO Group, which has been widely condemned for selling spyware to repressive governments.

Most unnerving to the investigators was that iMessages were infecting targeted cellphones without the users taking any action — what’s known as a zero-click vulnerability. Through push notifications alone, the malware instructed the phones to upload their content to servers linked to the NSO Group, Citizen Lab said, turning journalists’ iPhones into powerful surveillance tools without even luring users to click on suspicious links or threatening texts.

The coordinated attacks on Qatari-funded Al-Jazeera, which Citizen Lab described as the largest concentration of phone hacks targeting a single organization, occurred in July, just weeks before the Trump administration announced the normalization of ties between Israel and the UAE, the archival to Qatar. The breakthrough deal took public what had been a long-secret alliance. Analysts say normalization likely will lead to stronger cooperation in digital surveillance between Israel and Persian Gulf sheikhdoms.

Apple said it was aware of the Citizen Lab report and said the latest version of its mobile operating system, iOS 14, “delivered new protections against these kinds of attacks.” It sought to reassure users that NSO doesn’t target the average iPhone owner, but rather sells its software to foreign governments to target a limited group. Apple said it has not been able to independently verify Citizen Lab’s analysis.

Citizen Lab, which has been tracking NSO spyware for four years, tied the attacks “with medium confidence” to the Emirati and Saudi governments, based on their past targeting of dissidents at home and abroad with the same spyware. The two countries are embroiled in a bitter geopolitical dispute with Qatar in which hacking and cyber surveillance have increasingly become favored tools.

The Spyware Was Implicated in the Gruesome Killing of Saudi Journalist Jamal Khashoggi

In 2017, the two Gulf nations and their allies imposed a blockade on Qatar over its alleged support for extremist groups, a charge Doha denies. The UAE and Saudi Arabia served the tiny country with a list of demands, among them shutting down its influential Arabic-language TV network, which the UAE and Saudi Arabia see as promoting a political agenda at odds with their own. The feud continues to fester, although officials recently have indicated a resolution may be within reach.

Emirati and Saudi authorities did not respond to requests for comment.

The NSO Group cast doubt on Citizen Lab’s accusations in a statement but said it was “unable to comment on a report that we have not yet seen.” The firm said it provides technology for the sole purpose of enabling “governmental law enforcement agencies to tackle serious organized crime and counterterrorism.” Nevertheless, it added, “when we receive credible evidence of misuse … we take all necessary steps in accordance with our product misuse investigation procedure in order to review the allegations.” NSO does not identify its customers.

Prior to Sunday’s report, NSO’s spyware has repeatedly been found deployed to hack journalists, lawyers, human rights defenders and dissidents. Most notably, the spyware was implicated in the gruesome killing of Saudi journalist Jamal Khashoggi, who was dismembered in the Saudi consulate in Istanbul in 2018 and whose body has never been found. Several alleged targets of the spyware, including a close friend of Khashoggi and several Mexican civil society figures, sued NSO in an Israeli court over the hacking.

The NSO Group’s surveillance software, known as Pegasus, is designed to bypass detection and mask its activity. The malware infiltrates phones to vacuum up personal and location data and surreptitiously control the smartphone’s microphones and cameras, allowing hackers to spy on reporters’ face-to-face meetings with sources.

“It’s not only very scary, but it’s the holy grail of phone hacking,” said Bill Marczak, a senior researcher at Citizen Lab. “You can be using your phone normally, completely unaware that someone else is looking at everything you’re doing.”

‘It’s a Horrible Feeling to Be So Insecure’

The Citizen Lab researchers connected the hacks to previously identified Pegasus operators in attacks attributed to Saudi Arabia and the UAE over the last four years.

Rania Dridi, a newscaster at the London-based satellite channel Al Araby, never noticed anything amiss. Although she said she’s accustomed to Emirati and Saudi criticism over her reporting on human rights and the UAE’s role in wars in Libya and Yemen, she was shocked to learn her phone had been infected with invasive spyware on several occasions starting October 2019.

“It’s a horrible feeling to be so insecure, to know my private life wasn’t private this whole time,” she said.

The zero-click vulnerability is increasingly being used to hack cellphones without a trace, said Marczak. Last year, WhatsApp and its parent company Facebook filed an unprecedented lawsuit against the NSO Group, accusing the Israeli firm of targeting some 1,400 users of its encrypted messaging service with highly sophisticated spyware through missed calls. Earlier this month, an Al-Jazeera anchor filed another lawsuit in the U.S., alleging that the NSO Group hacked her phone through WhatsApp over her reporting on Saudi Arabia’s powerful Crown Prince Mohammed bin Salman.

With the UAE and Bahrain normalizing ties with Israel, the use of Israeli spyware in the region may accelerate, Marczak added, encompassing a “much wider range of government agencies and customers across the Gulf.”

The Al-Jazeera attack represents the tip of the iceberg, said Yaniv Balmas, head of cyber research at Check Point, an Israeli security company.

“These hacks are not supposed to be public,” he said. “We should assume they’re happening all the time, everywhere.”

RELATED TOPICS:

DON'T MISS

Kash Patel Plans to Move Up to 1,500 Workers Out of Washington

DON'T MISS

Fired Employees Fear Beloved Yosemite National Park Will Lose Its Luster

DON'T MISS

US and Ukraine Nearing Rare Earths Deal That Would Tighten Relationship

DON'T MISS

Trump Fires Chairman of the Joint Chiefs of Staff and Two Other Military Officers

DON'T MISS

Less Is More: 5 Ingredient Dinners Are Easier Than You Think

DON'T MISS

Trump-Putin Summit Preparations Are Underway, Russia Says

DON'T MISS

Warren Buffett Offers Trump Some Advice While Celebrating Berkshire’s Success

DON'T MISS

Hungarians Will Decide Whether Ukraine Can Join the European Union, Orbán Says

DON'T MISS

Wolfie the Handsome Pup Seeks Loving Home After Life in the Wild

DON'T MISS

National Park Service Restores Some Jobs of Those Fired, Will Hire 7,700 Seasonal Workers

UP NEXT

Voletta Wallace, Notorious B.I.G.’s Mother and Keeper of His Legacy, Dies at 78

UP NEXT

Bullard Teacher Arrested for Inappropriate Behavior With a Minor, Principal Says

UP NEXT

Nearly 1 in 10 U.S. Adults Identifies as LGBTQ+, Survey Finds

UP NEXT

Europe’s Leaders, Dazed by an Ally Acting Like an Adversary, Recalculate

UP NEXT

Arctic Blast Causes Massive Pileups, Power Outages Across East Coast

UP NEXT

EU Official Meets With Trump Counterparts to Resolve Tariff Threats

UP NEXT

Struggling Forever 21 Plans to Close 200 Stores in Possible 2nd Bankruptcy

UP NEXT

2 People Are Dead in a Small Plane Collision at a Southern Arizona Airport

UP NEXT

Official White House Account Declares Trump ‘King’ in Latest Post

UP NEXT

A$AP Rocky Returns to a Life of Music, Fashion, Film and Rihanna With His Acquittal

Trump Fires Chairman of the Joint Chiefs of Staff and Two Other Military Officers

6 hours ago

Less Is More: 5 Ingredient Dinners Are Easier Than You Think

6 hours ago

Trump-Putin Summit Preparations Are Underway, Russia Says

7 hours ago

Warren Buffett Offers Trump Some Advice While Celebrating Berkshire’s Success

7 hours ago

Hungarians Will Decide Whether Ukraine Can Join the European Union, Orbán Says

7 hours ago

Wolfie the Handsome Pup Seeks Loving Home After Life in the Wild

7 hours ago

National Park Service Restores Some Jobs of Those Fired, Will Hire 7,700 Seasonal Workers

8 hours ago

Is That Legal? A Guide to Trump’s Big Moves So Far.

9 hours ago

Hotels Are So Last Year – Why Everyone’s Sleeping in Castles, Caves and Cranes

10 hours ago

With Trump’s Prostration to Putin, Expect a More Dangerous World

10 hours ago

Kash Patel Plans to Move Up to 1,500 Workers Out of Washington

WASHINGTON — New FBI Director Kash Patel has told senior officials that he plans to relocate up to 1,000 employees from Washington to field ...

6 hours ago

6 hours ago

Kash Patel Plans to Move Up to 1,500 Workers Out of Washington

6 hours ago

Fired Employees Fear Beloved Yosemite National Park Will Lose Its Luster

6 hours ago

US and Ukraine Nearing Rare Earths Deal That Would Tighten Relationship

6 hours ago

Trump Fires Chairman of the Joint Chiefs of Staff and Two Other Military Officers

6 hours ago

Less Is More: 5 Ingredient Dinners Are Easier Than You Think

7 hours ago

Trump-Putin Summit Preparations Are Underway, Russia Says

7 hours ago

Warren Buffett Offers Trump Some Advice While Celebrating Berkshire’s Success

7 hours ago

Hungarians Will Decide Whether Ukraine Can Join the European Union, Orbán Says

Help continue the work that gets you the news that matters most.

Search

Send this to a friend