NSO has carried out 'unlawful' surveillance to target Amnesty staff members, HRDs

Counterview Desk
Following the exposure that Israeli spyware Pegasus, manufactured by NSO Group, has been used as a surveillance tool on smartphones used by about 1,500 human rights defenders (HRDs), journalists and activists, including in India, the top rights body, Amnesty International India, has appealed to those who have received a notification immediately to get in touch with Amnesty Tech at share@amnesty.tech for support.

An Amnesty release on November 2 said that the rights body could also be contacted “on Signal or WhatsApp at +44 7492 882216”, adding, “We would be keen to provide support to HRDs, who have been targeted, to ensure they take defensive security measures immediately, as well as to understand more about the attacks and investigate possible infections.”

Meanwhile, Amnesty has put out questions and answers for HRDs, activist, or journalist based in India to understand NSO Group’s spyware Pegasus especially the WhatsApp targeting.

Text:

Q: What do we know about the NSO Group and its ‘Pegasus’ Spyware?

A: ‘NSO Group’ is an Israeli spyware manufacturer that claims to sell its surveillance tools – the most well-known being its Pegasus spyware – exclusively to governments and government agencies ‘to combat terror and crime’.

Its products have been misused multiple times to conduct unlawful surveillance against human rights defenders. In the past, it has been used to target an Amnesty International staff member, HRDs, activists, and journalists from Saudi Arabia, UAE, Mexico, Morocco, and Rwanda.

Q: How does Pegasus work?

A: If infected by the Pegasus spyware, the user’s Smartphone is compromised. It can track keystrokes, take control of the phone’s camera and microphone, and access contact lists and encrypted messages.

Until now, Pegasus is known to be delivered through SMS messages carrying malicious links and through exploiting a zero-day vulnerability on WhatsApp. In the latter, intrusive spyware could be delivered on to the target’s mobile device without the targeted person having to click on a malicious link. The targeted person would simply see a missed call on WhatsApp.

In addition to this, Amnesty International has also found evidence of network injection attacks that could also be attributed to NSO Group. Network injection attacks are generally called “man-in-the-middle” attacks. Through this, an attacker with access to a target’s mobile network connection can monitor and opportunistically hijack web traffic and silently re-route the web browser to malicious exploit pages.

Q: How did the targeting via WhatsApp work?

A: NSO Group exploited a security vulnerability in WhatsApp until May 2019. In order to exploit this, the digital attack initiated WhatsApp calls to the target’s device. Attackers may have tried to exploit this issue by making calls multiple times during the night when the target was likely to be asleep and not notice these calls. Successful infection of the target’s device may result in the app crashing. There is a possibility that the attacker may also remotely erase evidence of these calls from the device’s call logs. Evidence of failed attacks may appear as missed calls from unknown numbers in your WhatsApp call log.

Q: If I didn’t receive a notification from WhatsApp, does this mean I wasn’t targeted by NSO Group’s tools?

A: NSO Group’s Pegasus tool is used for targeted attacks and by design, is not meant for mass surveillance. This means that only select individuals would have been targeted. However, if you are a high risk user, i.e., an activist, journalist, or HRD involved in politically sensitive activism, you cannot presume that you have not been targeted simply because you haven’t received a notification from WhatsApp.

The attack was delivered by exploiting a vulnerability in WhatsApp. However, NSO Pegasus infections can also be delivered through other means. Based on information revealed by our own investigations, an Amnesty International staffer was targeted using SMS messages. One HRD in Morocco was targeted both before and after the attacks using the WhatsApp exploit, but not with the WhatsApp exploit itself. Both of them were targeted using SMS messages containing malicious links and network injection attacks that could also be attributed to NSO Group’s tools. This indicates that NSO Group has the documented capability to deliver infections through means other than WhatsApp.

Q: If WhatsApp was targeted, can’t I just switch to another encrypted platform?

A: No. A vulnerability in the WhatsApp software was exploited to deliver the spyware. All complex software can have these types of vulnerabilities. This vulnerability was not a flaw in WhatsApp’s end-to-end encryption protocol.

This also does not mean that only the Whatsapp data of the target was compromised. If the attack attempt was successful, the spyware would gain full access to the device. Any other data on the device including encrypted platforms such as Signal or Telegram could then also have been accessed.

Q: Can Pegasus plant data into my devices?

A: Based on publicly available information, planting data is not a feature of NSO Group’s Pegasus spyware.

Q: What steps can I take to protect myself?

A: None of the security best practices offer complete and foolproof protection. However, it is a good practice to install the latest software updates of operating systems and encrypted messaging applications on your mobile device.

Pegasus remains a relatively uncommon threat and standard digital hygiene steps are still important. Keep your devices software up-to-date. Use a unique password for each service that you use and store these passwords in a secure password manager. Enable two-factor authentication on all accounts where it is available.

Comments

North Gujarat gram panchayat bars villagers from dealing with Muslim hawkers, traders

By Our Representative A gram panchayat in North Gujarat has barred its residents not to buy anything from Muslim traders and hawkers. An order of the Waghasan group gram panchayat of Tharad taluka of Banaskantha district dated June 30 states that the decision has been taken in the wake of beheading of a Hindu tailor after he posted a derogatory writeup on Prophet Mohammad in Udaipur. The gram panchayat resolution says, anyone seen buying or selling any commodity from a Muslim hawker or trader would be fined Rs 5,100. Bringing this to light, Mujahid Nafees, convener, Minority Coordination Committee, in a letter to Gujarat chief minister Bhupendra Patel, says, the state government should take legal action against the panchayat chief who has signed the “unjust” order. The letter says, the act of the sarpanch and other signatories is a violation of rule of law of the state and threat to peace, pointing out, the move is in violation of Article 15 of the Constitution, which says that none

Unlike Soviet Union, Russia is no friend to India: Ukrainian scholar tells 'Indian friends'

Counterview Desk In an open letter to "dear Indian friends", Anastasia Piliavsky, born in Odessa, Ukraine, studied at Boston and Oxford Universities (on a Rhodes Scholarship), and now teaches at King’s College, London, has said that she faces "deep moral dilemma", personally and professionally, over the "astonishingly unified Indian response to the war in Ukraine." Based on her interaction with a "number of thoughtful and caring Indian friends", in this letter, she says, she is "reeling at the ubiquitous silence at, justifications of or outright support for Putin’s terror, which now prevails in India, at the ubiquitous #IStandWithPutin and #istandwithrussia hashtags." She insists, India must understand, "Unlike the Soviet Union, Russia is no friend to India. Soviet leaders, beginning with (the Ukrainian) Nikita Khrushchev – who declared hindi rusi bhai bhai – built up deep political and cultural exchange with India." Text : I

PLFS data: Is rising employment good news? Deeper analysis suggests contrary results

By Ishwar Chandra Awasthi, Puneet Kumar Shrivastav* Results of the Periodic Labour Force Survey (PLFS), 2020-21 , released by the Ministry of Statistics and Programme Implementation, Government of India (GoI) on June 14, 2022, show improvement in work force participation rate (WPR) and labour force participation rate (LFPR) and declining unemployment rate. Four rounds of data have been released from 2017-18 to 2020-21 based on PLFS. The general trend in the last four rounds clearly shows consistent increase in WPR and LFPR and falling unemployment rates by usual status (PS+SS). Though increase in WPR and LFPR is reported highest in 2019-20 over 2018-19, yet rising trend in these two key indicators continues throughout, and similarly fall in unemployment is registered highest in 2019-20 over 2018-19. Clearly, the recent results give some solace and relief after unprecedented Covid-19 pandemic that has entailed enormous loss of human lives and livelihoods and crippled economic activit

Technocratic globalism, tyranny? Health Ministry warned: bill to 'enslave' Indians

Sandeep Pandey, Tushar Gandhi By Rosamma Thomas* Union of Concerned Citizens, a group comprising Magsaysay Award winner Prof Sandeep Pandey, human rights activist Tushar Gandhi, former judge of the Bombay High Court BG Kolse Patil, pediatrician Dr Jacob Puliyel and several renowned Indian citizens have written to the Union Health Minister cautioning him against tabling the draft Public Health Bill in the Monsoon Session of Parliament. “The Public Health (Prevention, Control And Management Of Epidemics, Bio-Terrorism And Disasters) Bill, 2017 and a Prospective Bill of 2022 as discussed in news articles, is straightforwardly violative of Fundamental Rights of the citizens of India and therefore, Ultra Vires of the Indian Constitution. It contravenes several International Treaties and Conventions including the Nuremberg Treaty of 1947 which was enacted to ensure that no country would repeat such inhuman medical atrocities on fellow human beings”, the 12-page letter reads. “Strangely, t

'Drop all falsed charges': 150 citizens demand early release of AltNews co-founder

Counterview Desk About 150 concerned citizens have demanded the release of Mohammed Zubair, co-founder of the fact-checkng newsportal AltNews, arrested over a 2018 tweet which allegedly hurt religious sentiments, even as booking for criminal conspiracy and having received foreign funds in violation of the Foreign Contribution Regulation Act (FCRA). Denied bail last weekend and sent to 14-day judicial custody, the concerned citizens, in a statement, regretted that while the Delhi High Court issued notice to the Delhi police on a petition filed on behalf of Zubair challenging the legality and propriety of his police remand and the seizure of his electronic devices, the “frivolous case” continues. Excerpts: The illegal arrest of Mr. Mohammed Zubair happened on June 27, 2022, by the Delhi Police for allegedly hurting religious sentiments and promoting enmity over a tweet from 2018. The IPC Sections included 153(a) (Promoting enmity between different groups on grounds of religion, race,

Chennai residents 'suffering': Faulty design, implementation of storm water project

By NS Venkataraman* The Greater Chennai Corporation is now implementing storm water drainage project in 559 roads, covering a distance of 1033 kilometres, which cost around Rs 4,070 crore. For this massive project, which is targeted to be completed between April and September this year, huge loan has been availed from World Bank, Asian Development Bank and others. Several technocrats have pointed out that the project has been designed with outdated technology and quality of the implementation is so poor that the residents have been put to great hardships. As part of the project, digging of the road has been done to around 5 to 6 feet deep and width of around 4 to 5 feet. The drains are being constructed using steel reinforced cement concrete with two walls on either side with provisions for manhole, chute etc. This has been done in front of several houses leaving little space between the gate of the house and that of the drainage structure. As the work has been going on for mor

Prime Minister's 'affordable' housing policy fails to help Gujarat slum dwellers: Study

By Rajiv Shah A new study on the implementation of one of the major policy initiatives for the urban poor by the Narendra Modi government after it came to power, Pradhan Mantri Awas Yojana (PMAY), has said that in Gujarat, which happens to be the Prime Minister’s home state, has quoted state officials as “confirming” that no progress towards tenure regularization, a key requirement for providing housing to the state’s slum dwellers. Stating that this particularly true of smaller town, the study, carried out by the non-profit Homes in the City (HIC), which is based in Bhuj, district headquarter of Kutch that saw a devastating earthquake in 2001, says, the failure to provide affordable housing is there despite the fact that there has been “significant demand” in all the 83 out of 153 Gujarat municipalities studied by experts involved in the study. According to the study, out f a total of 1.41 lakh demands for housing under the Beneficiary Led Construction (BLC) category, 94,232 (66.7%)

'Contractor-official nexus led to RTI activist's murder': Fact-finding team seeks probe

Courtyard inside of PWD office where Ranjeet Soni was killed Counterview Desk A fact-finding team* visited Vidisha, Madhya Pradesh (MP) on June 19, 2022 to meet with the family of Ranjeet Soni, who was shot dead on June 2, 2022 inside the premises of the PWD office in Vidisha. The objective was to gather information about the circumstances surrounding the death of Ranjeet Soni and his work on exposing corruption through the use of the Right to Information (RTI) Act. A report prepared by the team members says that Ranjeet had been extensively using the RTI Act to access information from the government, and upon receiving documents showing misuse of public funds or corruption, he was filing complaints to various authorities including the Lokyukta, Publi Works Department (PWD) and the Chief Minister’s Office. It notes, Ranjeet used to work as a contractor and often undertook government works in collaboration with other contractors, including those being investigated for his murder. A f

Buddhist shrines were 'massively destroyed' by Brahmanical rulers: Historian DN Jha

Nalanda mahavihara By Our Representative Prominent historian DN Jha, an expert in India's ancient and medieval past, in his new book , "Against the Grain: Notes on Identity, Intolerance and History", in a sharp critique of "Hindutva ideologues", who look at the ancient period of Indian history as "a golden age marked by social harmony, devoid of any religious violence", has said, "Demolition and desecration of rival religious establishments, and the appropriation of their idols, was not uncommon in India before the advent of Islam".

Electricity Bill: Centre's reform measures contain 'carrot and stick package' for states

Counterview Desk The Peoples’ Commission on Public Sector and Public Services (PCPSPS), claiming to be a network of eminent academics, jurists, erstwhile administrators, trade unionists and social activists, seeking consultations with stakeholders with those who are against the government’s decision to monetise, disinvest and privatise public assets/enterprises, has said that the proposed Electricity (Amendment) Bill-2022 will have far-reaching impacts on the finances of states. Insisting that the proposed Bill would lead to “assault on India’s federal structure”, in a statement, it says, it would weaken the finances of states’ power distribution companies, have adverse impact on utility employees, cripple the states' finances, impose a heavy cost burden on the smaller subsidized consumers (especially farmers), and benefit only corporate business houses. “States cannot afford to ignore the far-reaching implications of the Bill on their economy, finances, agricultural and industria

Counterview

Search This Blog