NSO – not government clients – operates its spyware, legal documents reveal
Legal documents released in ongoing US litigation between NSO Group and WhatsApp have revealed for the first time that the Israeli cyberweapons maker – and not its government customers – is the party that “installs and extracts” information from mobile phones targeted by the company’s hacking software.The new details were contained in sworn depositions from NSO Group employees, portions of which were published for the first time on Thursday.It comes five years after WhatsApp, the popular messaging app owned by Facebook, first announced it was filing suit against NSO.The company, which was blacklisted by the Biden administration in 2021, makes what is widely considered the world’s most sophisticated hacking software, which – according to researchers – has been used in the past in Saudi Arabia, Dubai, India, Mexico, Morocco and Rwanda.The timing of the latest development is important in the wake of Donald Trump’s victory in the 2024 presidential election.
Pegasus has been used by autocratic leaders around the world to target journalists and dissidents, including by the government of Viktor Orbán, who Trump admires,NSO has lobbied members of Congress in an attempt to be removed from the Biden administration’s so-called blacklist, and Trump’s return to the White House could signify a change in White House policy on the use of spyware,WhatsApp filed suit in California in 2019 after it revealed that it had discovered that 1,400 of its users – including journalists and human rights activists – had been targeted by the spyware over a two-week period,At the heart of the legal fight was an allegation by WhatsApp that NSO had long denied: that it was the Israeli company itself, and not its government clients around the world, who were operating the spyware,NSO has always said that its product is meant to be used to prevent serious crime and terrorism, and that clients are obligated not to abuse the spyware.
It has also insisted that it does not know who its clients are targeting.A spokesperson for NSO, Gil Lainer, said in a statement: “NSO stands behind its previous statements in which we repeatedly detailed that the system is operated solely by our clients and that neither NSO nor its employees have access to the intelligence gathered by the system.We are confident that these claims, like many others in the past, will be proven wrong in court, and we look forward to the opportunity to do so.”WhatsApp is seeking a summary judgment in the case, which means it is asking a judge to rule on the case now.NSO has opposed the motion.
To make its case, WhatsApp was allowed by Judge Phyllis Hamilton to make its case, including citing depositions that have previously been redacted and out of public view.In one, an NSO employee said customers only needed to enter a phone number of the person whose information was being sought.Then, the employee said, “the rest is done automatically by the system”.In other words, the process was not operated by customers.Rather NSO alone decided to access WhatsApp’s servers when it designed (and continuously upgraded) Pegasus to target individuals’ phones.
A deposed NSO employee also acknowledged under questioning from WhatsApp lawyers that one known target of the company’s spyware – Princess Haya of Dubai – was one of 10 examples of clients who had been “abused” “so severely” that NSO disconnected the service.The Guardian and its media partners first reported in 2021 that Haya and her associates were on a database of people who were of interest to a government client of NSO.A senior high court judge in the UK later ruled that the ruler of Dubai hacked the phone of his ex-wife Princess Haya using Pegasus spyware in an unlawful abuse of power and trust.The president of the family division found that agents acting on behalf of Sheikh Mohammed bin Rashid al-Maktoum, who is also prime minister of the United Arab Emirates, a close Gulf ally of Britain, hacked Haya and five of her associates while the couple were locked in court proceedings in London concerning the welfare of their two children.Those hacked included two of Haya’s lawyers, one of whom, Fiona Shackleton, sits in the House of Lords and was tipped off about the hacking by Cherie Blair, who was working with NSO.
Billionaire Gautam Adani charged in US over alleged $250m bribery plot
Gautam Adani, one of the world’s richest men, has been indicted in New York over an alleged multi-billion-dollar scheme to pay $250m in bribes and conceal the scheme from US investors.Prosecutors charged the chair of Indian conglomerate Adani Group and two other executives of a renewable energy company with securities fraud and conspiring to commit securities and wire fraud.The US attorney’s office in Brooklyn accused the executives of agreeing to pay hundreds of millions of dollars’ worth of bribes to Indian government officials between 2020 and 2024, in a bid to obtain solar energy supply contracts expected to yield $2bn in profits over 20 years.Separately, the Securities and Exchange Commission (SEC), the US’s top markets watchdog, charged Adani, 62, and two other executives over conduct it said had arisen out of a “massive bribery scheme”.Adani Group did not immediately respond to a request for comment
UK inflation rises to 2.3%, increasing pressure to delay interest rate cut
Inflation could rise above 3% next year after it increased to 2.3% in October, heaping pressure on the Bank of England to delay further interest rate cuts until the spring.Figures released by the Office for National Statistics (ONS) on Wednesday showed that a rise in energy bills pushed up the consumer prices index (CPI), reversing a downward trend this year in inflation, which was 1.7% in September.The figure for the year to October was slightly above the 2
Opt out: how to stop tech companies spying on your phone as Trump promises mass deportations
There are no federal privacy regulations to protect your information – here’s how you can do it yourselfWelcome to Opt Out, a semi-regular column in which we help you navigate your online privacy and show you how to say no to surveillance. The last column covered how to talk to your family about not posting your baby’s photos on the internet.President-elect Donald Trump has promised to execute the largest mass deportation of undocumented immigrants in American history, and many rights groups are concerned he’ll also introduce or reinstate rules that target broader immigrant communities as well – even if they’ve come through legal pathways or have been naturalized. If his prior administration is any indication, that can include people from certain Muslim-majority countries, asylum seekers and refugees.Civil liberties groups are bracing for what this will mean for the privacy and data security of immigrants around the country
Can a fluffy robot really replace a cat or dog? My weird, emotional week with an AI pet
Casio says Moflin can develop its own personality and build a rapport with its owner – and it doesn’t need food, exercise or a litter tray. But is it essentially comforting or alienating?It looks faintly like one half of a small pair of very fluffy slippers. It squeaks and wriggles and nestles in the palm of my hand, black eyes hidden beneath a mop of silvery-white fur. It weighs about the same as a tin of soup. It doesn’t need to be fed or walked and it doesn’t use a litter tray; it’s guaranteed not to leave “gifts” on my doorstep
Warren Gatland doubles down on Wales job but public support in short supply
The last rites, if that is what they are, are going to drag on a while longer yet. On Wednesday, Warren Gatland reiterated that he would resign as head coach if it were “in the best interests of Welsh rugby”, while also making it very clear that in his opinion it is not.Gatland says he had the conversations with his family and his employers after Wales lost 52-20 to Australia on Sunday, their 11th straight defeat. Whatever was said, it has left him “focused solely on preparing the team for this week”.Which brings the ominous prospect of a match against South Africa, the back-to-back world champions
Rejigged India can draw strength from 2021 – but still face uphill struggle | Geoff Lemon
Arriving in Australia in the ember weeks of 2024, the Indian Test team is in an unusual position. They are, in a sense, defending champions. Starting in 1947, Asian teams toured Australia 30 times in a row without winning a series. Most of the time they didn’t come close: Australia won 24, six drawn. It was January 2019 in Sydney, after more than seven decades, that India’s run mountain while leading the series forced the home team to bat for a draw
UK government borrowing jumps to £17.4bn in October; Bitcoin nears $100,000 for first time – business live
Australia took its interest rate medicine – and it has poisoned our living standards | Greg Jericho
Apple Watch Series 10 review: thinner, lighter and basically the same
Nvidia earnings: AI chip leader shows no signs of stopping mammoth growth
‘Going in wrong direction’ – F1 drivers have lost confidence in leadership
England adjusting Tom Curry’s technique to ensure safety after latest concussion