NSO has carried out 'unlawful' surveillance to target Amnesty staff members, HRDs

Counterview Desk
Following the exposure that Israeli spyware Pegasus, manufactured by NSO Group, has been used as a surveillance tool on smartphones used by about 1,500 human rights defenders (HRDs), journalists and activists, including in India, the top rights body, Amnesty International India, has appealed to those who have received a notification immediately to get in touch with Amnesty Tech at share@amnesty.tech for support.

An Amnesty release on November 2 said that the rights body could also be contacted “on Signal or WhatsApp at +44 7492 882216”, adding, “We would be keen to provide support to HRDs, who have been targeted, to ensure they take defensive security measures immediately, as well as to understand more about the attacks and investigate possible infections.”

Meanwhile, Amnesty has put out questions and answers for HRDs, activist, or journalist based in India to understand NSO Group’s spyware Pegasus especially the WhatsApp targeting.

Text:

Q: What do we know about the NSO Group and its ‘Pegasus’ Spyware?

A: ‘NSO Group’ is an Israeli spyware manufacturer that claims to sell its surveillance tools – the most well-known being its Pegasus spyware – exclusively to governments and government agencies ‘to combat terror and crime’.

Its products have been misused multiple times to conduct unlawful surveillance against human rights defenders. In the past, it has been used to target an Amnesty International staff member, HRDs, activists, and journalists from Saudi Arabia, UAE, Mexico, Morocco, and Rwanda.

Q: How does Pegasus work?

A: If infected by the Pegasus spyware, the user’s Smartphone is compromised. It can track keystrokes, take control of the phone’s camera and microphone, and access contact lists and encrypted messages.

Until now, Pegasus is known to be delivered through SMS messages carrying malicious links and through exploiting a zero-day vulnerability on WhatsApp. In the latter, intrusive spyware could be delivered on to the target’s mobile device without the targeted person having to click on a malicious link. The targeted person would simply see a missed call on WhatsApp.

In addition to this, Amnesty International has also found evidence of network injection attacks that could also be attributed to NSO Group. Network injection attacks are generally called “man-in-the-middle” attacks. Through this, an attacker with access to a target’s mobile network connection can monitor and opportunistically hijack web traffic and silently re-route the web browser to malicious exploit pages.

Q: How did the targeting via WhatsApp work?

A: NSO Group exploited a security vulnerability in WhatsApp until May 2019. In order to exploit this, the digital attack initiated WhatsApp calls to the target’s device. Attackers may have tried to exploit this issue by making calls multiple times during the night when the target was likely to be asleep and not notice these calls. Successful infection of the target’s device may result in the app crashing. There is a possibility that the attacker may also remotely erase evidence of these calls from the device’s call logs. Evidence of failed attacks may appear as missed calls from unknown numbers in your WhatsApp call log.

Q: If I didn’t receive a notification from WhatsApp, does this mean I wasn’t targeted by NSO Group’s tools?

A: NSO Group’s Pegasus tool is used for targeted attacks and by design, is not meant for mass surveillance. This means that only select individuals would have been targeted. However, if you are a high risk user, i.e., an activist, journalist, or HRD involved in politically sensitive activism, you cannot presume that you have not been targeted simply because you haven’t received a notification from WhatsApp.

The attack was delivered by exploiting a vulnerability in WhatsApp. However, NSO Pegasus infections can also be delivered through other means. Based on information revealed by our own investigations, an Amnesty International staffer was targeted using SMS messages. One HRD in Morocco was targeted both before and after the attacks using the WhatsApp exploit, but not with the WhatsApp exploit itself. Both of them were targeted using SMS messages containing malicious links and network injection attacks that could also be attributed to NSO Group’s tools. This indicates that NSO Group has the documented capability to deliver infections through means other than WhatsApp.

Q: If WhatsApp was targeted, can’t I just switch to another encrypted platform?

A: No. A vulnerability in the WhatsApp software was exploited to deliver the spyware. All complex software can have these types of vulnerabilities. This vulnerability was not a flaw in WhatsApp’s end-to-end encryption protocol.

This also does not mean that only the Whatsapp data of the target was compromised. If the attack attempt was successful, the spyware would gain full access to the device. Any other data on the device including encrypted platforms such as Signal or Telegram could then also have been accessed.

Q: Can Pegasus plant data into my devices?

A: Based on publicly available information, planting data is not a feature of NSO Group’s Pegasus spyware.

Q: What steps can I take to protect myself?

A: None of the security best practices offer complete and foolproof protection. However, it is a good practice to install the latest software updates of operating systems and encrypted messaging applications on your mobile device.

Pegasus remains a relatively uncommon threat and standard digital hygiene steps are still important. Keep your devices software up-to-date. Use a unique password for each service that you use and store these passwords in a secure password manager. Enable two-factor authentication on all accounts where it is available.

Comments

Loktantra Bachao Abhiyan raises concerns over Jharkhand Adivasis' plight in Assam, BJP policies

By Our Representative The Loktantra Bachao Abhiyan (Save Democracy Campaign) has issued a pressing call to protect Adivasi rights in Jharkhand, highlighting serious concerns over the treatment of Jharkhandi Adivasis in Assam. During a press conference in Ranchi on November 9, representatives from Assam, Chhattisgarh, and Madhya Pradesh criticized the current approach of BJP-led governments in these states, arguing it has exacerbated Adivasi struggles for rights, land, and cultural preservation.

Promoting love or instilling hate and fear: Why is RSS seeking a meeting with Rahul Gandhi?

By Ram Puniyani* India's anti-colonial struggle was marked by a diverse range of social movements, one of the most significant being Hindu-Muslim unity and the emergence of a unified Indian identity among people of all religions. The nationalist, anti-colonial movement championed this unity, best embodied by Mahatma Gandhi, who ultimately gave his life for this cause. Gandhi once wrote, “The union that we want is not a patched-up thing but a union of hearts... Swaraj (self-rule) for India must be an impossible dream without an indissoluble union between the Hindus and Muslims of India. It must not be a mere truce... It must be a partnership between equals, each respecting the religion of the other.”

Right-arm fast bowler who helped West Indies shape arguably greatest Test team in cricket history

By Harsh Thakor* Malcolm Marshall redefined what it meant to be a right-arm fast bowler, challenging the traditional laws of biomechanics with his unique skill. As we remember his 25th death anniversary on November 4th, we reflect on the legacy he left behind after his untimely death from colon cancer. For a significant part of his career, Marshall was considered one of the fastest and most formidable bowlers in the world, helping to shape the West Indies into arguably the greatest Test team in cricket history.

Andhra team joins Gandhians to protest against 'bulldozer action' in Varanasi

By Rosamma Thomas* November 1 marked the 52nd day of the 100-day relay fast at the satyagraha site of Rajghat in Varanasi, seeking the restoration of the 12 acres of land to the Sarva Seva Sangh, the Gandhian organization that was evicted from the banks of the river. Twelve buildings were demolished as the site was abruptly taken over by the government after “bulldozer” action in August 2023, even as the matter was pending in court.

Swami Vivekananda's views on caste and sexuality were 'painfully' regressive

By Bhaskar Sur* Swami Vivekananda now belongs more to the modern Hindu mythology than reality. It makes a daunting job to discover the real human being who knew unemployment, humiliation of losing a teaching job for 'incompetence', longed in vain for the bliss of a happy conjugal life only to suffer the consequent frustration.

A Hindu alternative to Valentine's Day? 'Shiv-Parvati was first love marriage in Universe'

By Rajiv Shah The other day, I was searching on Google a quote on Maha Shivratri which I wanted to send to someone, a confirmed Shiv Bhakt, quite close to me -- with an underlying message to act positively instead of being negative. On top of the search, I chanced upon an article in, imagine!, a Nashik Corporation site which offered me something very unusual.

Will Left victory in Sri Lanka deliver economic sovereignty plan, go beyond 'tired' IMF agenda?

By Atul Chandra, Vijay Prashad* On September 22, 2024, the Sri Lankan election authority announced that Anura Kumara Dissanayake of the Janatha Vimukthi Peramuna (JVP)-led National People’s Power (NPP) alliance won the presidential election. Dissanayake, who has been the leader of the left-wing JVP since 2014, defeated 37 other candidates, including the incumbent president Ranil Wickremesinghe of the United National Party (UNP) and his closest challenger Sajith Premadasa of the Samagi Jana Balawegaya.

Will Bangladesh go Egypt way, where military ruler is in power for a decade?

By Vijay Prashad* The day after former Bangladeshi Prime Minister Sheikh Hasina left Dhaka, I was on the phone with a friend who had spent some time on the streets that day. He told me about the atmosphere in Dhaka, how people with little previous political experience had joined in the large protests alongside the students—who seemed to be leading the agitation. I asked him about the political infrastructure of the students and about their political orientation. He said that the protests seemed well-organized and that the students had escalated their demands from an end to certain quotas for government jobs to an end to the government of Sheikh Hasina. Even hours before she left the country, it did not seem that this would be the outcome.

A Marxist intellectual who dwelt into complex areas of the Indian socio-political landscape

By Harsh Thakor* Professor Manoranjan Mohanty has been a dedicated advocate for human rights over five decades. His work as a scholar and activist has supported revolutionary democratic movements, navigating complex areas of the Indian socio-political landscape. His balanced, non-partisan approach to human rights and social justice has made his books essential resources for advocates of democracy.

Tributes paid to pioneer of Naxalism in Punjab, who 'dodged' police for 60 yrs

By Harsh Thakor* Jagjit Singh Sohal, known as Comrade Sharma, a pioneer of Naxalism in Punjab, passed away on October 20 at the age of 96. Committed to the Naxalite cause and a prominent Maoist leader, Sohal, who succeeded Charu Majumdar, played hide and seek with the police for almost six decades. He was cremated in Patiala.

Search This Blog