AP Source: NSO Group spyware used to hack State employees

Dec 2, 2021, 9:52 PM | Updated: Dec 5, 2021, 9:22 am
FILE - A logo adorns a wall on a branch of the Israeli NSO Group company, near the southern Israeli...

FILE - A logo adorns a wall on a branch of the Israeli NSO Group company, near the southern Israeli town of Sapir, Aug. 24, 2021. The phones of 11 U.S. State Department employees were hacked using technology from Israel's NSO Group, the world's most infamous hacker-for-hire company, a person familiar with the matter said Friday, Dec. 3. (AP Photo/Sebastian Scheiner, File)

(AP Photo/Sebastian Scheiner, File)

WASHINGTON (AP) — The phones of 11 U.S. State Department employees were hacked with spyware from Israel’s NSO Group, the world’s most infamous hacker-for-hire company, a person familiar with the matter said Friday.

The employees were all located in Uganda and included some foreign service officers, said the person, who was not authorized to speak publicly about an ongoing investigation. Some local Ugandan employees of the department appear to have been among the 11 hacked, the person said.

The hacking is the first known instance of NSO Group’s trademark Pegasus spyware being used against U.S. government personnel.

It was not known what individual or entity used the NSO technology to hack into the accounts, or what information was sought.

“We have been acutely concerned that commercial spyware like NSO Group software poses a serious counterintelligence and security risk to U.S. personnel,” White House press secretary Jen Psaki said at briefing Friday.

Senior researcher John Scott-Railton of Citizen Lab, the public-interest sleuths at the University of Toronto who have been tracking Pegasus infections for years, called the discovery a giant wake-up call for the U.S. government about diplomatic security.

“For years we have seen that diplomats around the world are among targets,” he said, “and it looks like the message had to be brought home to the U.S. government in this very direct and unfortunate way. There is no exceptionalism when it comes to American phones in diplomats’ pockets.”

News of the hacks, which were first reported by Reuters, comes a month after the U.S. Commerce Department blacklisted NSO Group, barring U.S. technology from being used by the company. And Apple sued NSO Group last week seeking to effectively shut down its hacking of all iPhones and other Apple products, calling the Israeli company “amoral 21st century mercenaries.”

The State Department employees were hacked on their iPhones, the person familiar with the matter said.

NSO Group said in a statement that after being asked Thursday about the Ugandan phones “we immediately shut down all the customers potentially relevant to this case,” but did not say who the customers were. The company said its spying technology is blocked from hacking phones based in the U.S. and is only sold to licensed customers.

If the allegations turn out to be true “they are a blunt violation” of contract terms and NSO Group “will take legal action against these customers,” it added.

In announcing the lawsuit, Apple sent out notifications globally to people whose iPhones were hacked with Pegasus in countries ranging from El Salvador to Poland. The targeted State Department employees were among them.

Apple declined comment Friday on the Uganda hacks.

Marketed to governments for use solely against terrorists and criminals, Pegasus has been abused by NSO customers to spy on human rights activists, journalists and politicians from Saudi Arabia to Mexico, including such high-profile targets as the fiancee of Jamal Khashoggi, the Saudi journalist murdered in his country’s consulate in Istanbul.

NSO Group has been broadly denounced for allowing such targeting, and its placement on the Commerce Department’s “entity list” last month was the first time a company outside of China had been added over human rights violations, said Kevin Wolf, an attorney at Akin Gump and former top commerce official in the Obama administration.

Analysts wonder whether NSO Group can survive financially under such circumstances. Last week, Moody’s downgraded NSO Group’s financial outlook to negative, saying it risked defaulting on more than $300 million in loans as a result of “high uncertainty” of its ability to sell new licenses. It said NSO Group, which is privately held, has about 750 employees with 60 customers in more than 35 countries

The impact on companies blacklisted by the Commerce Department, about half of which are Chinese, is often far broader than barring them from using U.S. technology. Wolf said many companies choose to avoid doing business with them completely “in order to eliminate the risk of an inadvertent violation” and the legal costs of analyzing whether they can.

NSO Group was asked by The Associated Press prior to Friday’s news whether it could survive as long as it is on the entity list. While not directly responding, it said it was “working on all appropriate channels to reverse the Department of Commerce’s decision.”

The company again claimed that it does not operate the Pegasus command-and-control system that remotely manages hacks “and has no access to the data collected by its customers.” Cybersecurity researchers who have closely tracked NSO’s spyware dispute that claim. They say NSO’s government clients are incapable of running the online infrastructure and their sleuthing has confirmed centralized control of post-infection operations.

Apple’s lawsuit added major heft to a Big Tech legal onslaught against NSO Group. Facebook sued it in 2019 for allegedly hacking its globally popular encrypted WhatsApp messaging app. Last month, a U.S. federal appeals court ruled that the case could go forward, rejecting NSO’s claim it should be thrown out because it is a “sovereign entity.”

___

Suderman reported from Richmond, Va., and Bajak from Boston. Josef Federman in Jerusalem contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

U.S. Agriculture Secretary Tom Vilsack speaks during a visit to Wheat Ridge Poultry and Meats, a lo...
Associated Press

US plans wildfire fight where forests, neighborhoods collide

BILLINGS, Mont. (AP) — The Biden administration plans to significantly expand efforts to stave off catastrophic wildfires that have torched areas of the U.S. West by more aggressively thinning forests around areas called “hotspots” where nature and neighborhoods collide. As climate change heats up and dries out the West, administration officials said they have crafted […]
1 day ago
FILE - A demonstrator holds up "GUILTY" signs at the Hennepin County Government Center, Dec. 23, 20...
Associated Press

Do Minnesota cases show it’s getting easier to convict cops?

MINNEAPOLIS (AP) — First, it was Mohamed Noor — convicted of murder for shooting an unarmed woman who approached his police SUV. Then it was Derek Chauvin, found guilty of murder for using his knee to pin George Floyd to a Minneapolis street as he gasped for air. Last month, it was Kim Potter, guilty […]
1 day ago
FILE - Attorney General William Barr speaks during a news conference in Washington on Dec. 21, 2020...
Associated Press

Former AG William Barr’s memoir to be published March 8

NEW YORK (AP) — Former Attorney General William P. Barr has a memoir coming out March 8 titled “One Damn Thing After Another,” and billed by his publisher as a “vivid and forthright book” of his time serving two “drastically different” presidents, Donald Trump and George H.W. Bush. “Barr takes readers behind the scenes during […]
1 day ago
School children that were taught by Ashling Murphy holds pictures of their teacher outside St Brigi...
Associated Press

Irish mourn slain 23-year-old teacher who was out jogging

LONDON (AP) — Hundreds of mourners turned out Tuesday in Ireland for the funeral Mass of a 23-year-old elementary school teacher whose slaying has reignited debate about how to tackle violence against women. Police said Tuesday they arrested a man in his 30s on suspicion of murder in the case of Ashling Murphy, a musician […]
1 day ago
Jim Obergefell speaks during the National LGBT 50th Anniversary Ceremony, July 4, 2015, in front of...
Associated Press

Jim Obergefell, face of gay marriage, to run for Ohio House

TOLEDO, Ohio (AP) — Gay rights advocate Jim Obergefell, whose name was atop the U.S. Supreme Court case legalizing same-sex marriage nationwide, announced Tuesday that he’s running for a seat in the Ohio legislature. Obergefell, a Democrat, said he wants Ohio to be a place where people feel they have equal opportunity. He was the […]
1 day ago
Associated Press

Europe narrows hunt for next astronauts, eyes crewed flights

BERLIN (AP) — The European Space Agency has narrowed down the candidate list for its next generation of astronauts, including dozens who have a physical disability. The agency announced last year that it had received a record number of 22,589 applicants from people hoping to become the continent’s next generation of space travelers. ESA said […]
1 day ago

Sponsored Articles

...

Compassion International Is Determined to ‘Fill’ a Unique Type of Football ‘Stadium’

Compassion International SPONSORED — During this fall’s football season—and as the pandemic continues to impact the entire globe—one organization has been urging caring individuals to help it “fill” a unique type of “stadium” in order to make a lasting difference in the lives of many. Compassion International’s distinctive Fill the Stadium (FtS, fillthestadium.com) initiative provides […]
...

What are the Strongest, Greenest, Best Windows?

Lake Washington Windows & Doors SPONSORED — Fiberglass windows are an excellent choice for window replacement due to their fundamental strength and durability. There is no other type of window that lasts as long as fiberglass; so why go with anything else? Fiberglass windows are 8x stronger than vinyl, lower maintenance than wood, more thermally […]
...

COVID Vaccine is a Game-Changer for Keeping our Kids Healthy

Snohomish Health District SPONSORED — Cheers to the parents and guardians who keep their kids safe and healthy. The dad who cooks a meal with something green in it, even though he’s tired and drive-thru burgers were tempting. The mom who calms down the little one who loudly and resolutely does NOT want to brush […]
...
Experience Anacortes

Coastal Christmas Celebration Week in Anacortes

With minimal travel time required and every activity under the sun, Anacortes is the perfect vacation spot for all ages.
...

Delayed-Onset PTSD: Signs and Symptoms

Lakeside-Milam Recovery Centers SPONSORED — You’re probably familiar with post-traumatic stress disorder. Often abbreviated as PTSD, this condition is diagnosed when a person experiences a set of symptoms for at least a month after a traumatic event. However, for some people, these issues take longer to develop. This results in a diagnosis of delayed-onset PTSD […]
...

Medicare open enrollment ends Dec. 7. Free unbiased help is here!

Washington State Office of the Insurance Commissioner SPONSORED — Medicare’s Open Enrollment Period, also called the Annual Election Period, is Oct. 15 to Dec. 7. During this time, people enrolled in Medicare can: Switch from Original Medicare to a Medicare Advantage plan and vice versa. Join, drop or switch a Part D prescription drug plan, […]
AP Source: NSO Group spyware used to hack State employees