AP

US puts new controls on Israeli spyware company NSO Group

Nov 2, 2021, 7:53 PM | Updated: Nov 3, 2021, 1:59 pm

FILE - A logo adorns a wall on a branch of the Israeli NSO Group company, near the southern Israeli...

FILE - A logo adorns a wall on a branch of the Israeli NSO Group company, near the southern Israeli town of Sapir on Aug. 24, 2021. The Biden administration announced Wednesday, Nov. 3, that it is putting new export limits on two Israeli hacker-for-hire companies — including the well-known spyware company NSO Group — saying their tools have been used to "conduct transnational repression.” (AP Photo/Sebastian Scheiner, File)

(AP Photo/Sebastian Scheiner, File)

RICHMOND, Va. (AP) — The Biden administration announced Wednesday it is putting new export limits on Israel’s NSO Group, the world’s most infamous hacker-for-hire company, saying its tools have been used to “conduct transnational repression.”

The company, whose spyware researchers say has been used around the world to break into the phones of human rights activists, journalists, and even members of the Catholic clergy, said it would advocate for a reversal.

The U.S. Commerce Department said NSO Group and three other firms are being added to the “entity list,” which limits their access to U.S. components and technology by requiring government permission for exports. The department said putting these companies on the entity list was part of the Biden administration’s efforts to promote human rights in U.S. foreign policy.

“The United States is committed to aggressively using export controls to hold companies accountable that develop, traffic, or use technologies to conduct malicious activities that threaten the cybersecurity of members of civil society, dissidents, government officials, and organizations here and abroad,” U.S. Secretary of Commerce Gina Raimondo said in a statement.

The announcement was another blow to NSO Group, which was the focus of reports by a media consortium earlier this year that found the company’s spyware tool Pegasus was used in several instances of successful or attempted phone hacks of business executives, human rights activists and others around the world.

Pegasus infiltrates phones to vacuum up personal and location data and surreptitiously controls the smartphone’s microphones and cameras. Researchers have found several examples of NSO Group tools using so-called “zero click” exploits that infect targeted mobile phones without any user interaction.

Tech giant Facebook is currently suing NSO Group in U.S. federal court for allegedly targeting some 1,400 users of its encrypted messaging service WhatsApp with its spyware.

The company has broadly denied wrongdoing and issued a statement Wednesday saying its tools “support US national security interests and policies by preventing terrorism and crime.”

“We look forward to presenting the full information regarding how we have the world’s most rigorous compliance and human rights programs that are based (on) the American values we deeply share, which already resulted in multiple terminations of contacts with government agencies that misused our products,” the company said.

The full impact of being put on the entity list is unclear. Kevin Wolf, a lawyer at the firm Akin Gump and former top Commerce official, said being placed on the entity list can have a broad impact on a company.

“Many companies choose to avoid doing business with listed entities completely in order to eliminate the risk of an inadvertent violation and the costs of conducting complex legal analyses,” he said.

In 2019 the Commerce Department placed Chinese tech giant Huawei, which U.S. defense and intelligence communities have long accused of being an untrustworthy agent of Beijing’s repressive rulers, on the entity list.

Stewart Baker, a cybersecurity lawyer and former general counsel at the National Security Agency, said it remains to be seen how big an impact Wednesday’s announcement will have on the NSO Group’s long-term health. He said the Commerce Department will have significant discretion in how it handles licensing requests related to the NSO Group, and could face pressure from U.S. exporters and the Israeli government.

“We could see a situation in which the sanction has been granted and it has a great symbolic significance and some practical significance for NSO, but certainly isn’t a death penalty and may over time just be really aggravating,” he said.

Another Israeli spyware company, Candiru, was also added to the entity list. In July, Microsoft said it had blocked tools developed by Candiru that were used to spy on more than 100 people around the world, including politicians, human rights activists, journalists, academics and political dissidents.

A prominent Russian firm, Positive Technologies, and the Singapore-based Computer Security Initiative Consultancy were also placed on the list for trafficking in “cyber tools used to gain unauthorized access” to IT systems, the department said. The Treasury Department put sanctions on Positive Technology, which has a broad international footprint and partnerships with such IT heavyweights as Microsoft and IBM, earlier this year.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Image: A cargo ship is stuck under the part of the structure of the Francis Scott Key Bridge after ...

Associated Press

Authorities identify 2 bodies recovered at site of Baltimore bridge collapse

A major bridge in Baltimore snapped and collapsed after a container ship rammed into it early Tuesday, and several vehicles fell into the river below.

14 hours ago

Photo: Mountaineer Jim Whittaker has died at 95....

Gene Johnson, The Associated Press

Lou Whittaker, among the most famous American mountaineers, has died at age 95

Lou Whittaker, a legendary American mountaineer who helped lead ascents of Mount Everest, K2 and Denali, has died at age 95.

15 hours ago

File photo: Former Sen. Joe Lieberman speaks in Washington on Jan. 18, 2024....

Associated Press

Former Sen. Joe Lieberman, Democrats’ VP pick in 2000, dead at 82

Former U.S. Sen. Joe Lieberman of Connecticut, who nearly won the vice presidency on the Democratic ticket with Al Gore in 2000, has died.

15 hours ago

islamic state attack...

Vanessa Gera, The Associated Press

What we know after the Islamic State group claims responsibility for Moscow massacre

The Islamic State group has claimed responsibility for an attack on a suburban Moscow concert hall that killed at least 133 people.

4 days ago

Moscow shooting...

The Associated Press

Russia: 60 dead, 145 injured in concert hall raid; Islamic State group claims responsibility

Assailants burst into a concert hall in Moscow on Friday and sprayed the crowd with gunfire, killing over 60 people, injuring more than 100.

6 days ago

Photo: Britain's Kate, Duchess of Cambridge visits 282 (East Ham) Squadron, RAF Air Cadets, Cornwel...

Associated Press

Kate Middleton announces she has cancer, is undergoing chemotherapy

Kate Middleton, Princess of Wales, says she is undergoing chemotherapy to treat cancer. She has been out of view since Christmas.

6 days ago

US puts new controls on Israeli spyware company NSO Group