NSO Group spyware used to hack US govt employees: Sources
Washington, Dec 4: The phones of 11 US State Department employees were hacked using technology from Israel's NSO Group, the world's most infamous hacker-for-hire company, a person familiar with the matter said Friday.
The employees were all located in Uganda and included some foreign service officers, said the person, who was not authorised to speak publicly about an ongoing investigation. Some local Ugandan employees of the department appear to have been among the 11 hacked, the person said.
The hacking is the first known instance of NSO Group's spyware, known as Pegasus, being used against US government personnel.
It was not known what individual or entity used the NSO technology to hack into the accounts, or what information was sought.
We have been acutely concerned that commercial spyware like NSO Group software poses a serious counterintelligence and security risk to US personnel, White House press secretary Jen Psaki said at briefing Friday.
News of the hacks, which were first reported by Reuters, comes a month after the US Commerce Department blacklisted NSO Group, barring US technology from being used by the company.
And Apple sued NSO Group last week seeking to effectively shut down its hacking of all iPhones and other Apple products, calling the Israeli company amoral 21st century mercenaries."
The State Department employees were hacked on their iPhones, the person familiar with the matter said.
NSO Group said in a statement that it had terminated the relevant customers' access to its hacking system, but did not say who the customers were. The company said its spying technology is blocked from hacking phones based in the US and only sells to licensed customers.
NSO has no way to know who the targets of the customers are, as such, we were not and could not have been aware of this case, the company said.
In announcing the lawsuit, Apple sent out notifications globally to people whose iPhones were hacked with Pegasus in countries ranging from El Salvador to Poland. The targeted State Department employees were among them.
Apple declined comment Friday on the Uganda hacks.
Marketed to governments for use solely against terrorists and criminals, Pegasus has been abused by NSO customers to spy on human rights activists, journalists and politicians from Saudi Arabia to Mexico, including such high-profile targets as the fiancee of Jamal Khashoggi, the Saudi journalist murdered in his country's consulate in Istanbul.
NSO Group has been broadly denounced for allowing such targeting, and its placement on the Commerce Department's "entity list last month was the first time a company outside of China had been added over human rights violations, said Kevin Wolf, an attorney at Akin Gump and former top commerce official in the Obama administration.
Analysts wonder whether NSO Group can survive financially under such circumstances. Last week, Moody's downgraded NSO Group's financial outlook to negative, saying it risked defaulting on more than USD 300 million in loans as a result of high uncertainty of its ability to sell new licenses. It said NSO Group, which is privately held, has about 750 employees with 60 customers in more than 35 countries.
The impact on companies blacklisted by the Commerce Department, about half of which are Chinese, is often far broader than barring them from using US technology.
Wolf said many companies choose to avoid doing business with them completely in order to eliminate the risk of an inadvertent violation and the legal costs of analyzing whether they can.
NSO Group was asked by The Associated Press prior to Friday's news whether it could survive as long as it is on the entity list. While not directly responding, it said it was working on all appropriate channels to reverse the Department of Commerce's decision.
Let the Truth be known. If you read VB and like VB, please be a VB Supporter and Help us deliver the Truth to one and all.
Rickelton's ton in vain as SRH beat MI by 6 wickets
Mumbai (PTI): Ryan Rickelton's whirlwind unbeaten ton was overshadowed by Heinrich Klaasen's unbeaten 65 as Sunrisers Hyderabad defeated Mumbai Indians by six wickets in an IPL match here on Wednesday.
Chasing an imposing 244-run target, Travis Head (76 off 30) and Abhishek Sharma (45 off 24) shared 129 runs for the opening wicket to set the platform for SRH.
Klaasen (65 not out off 30 balls) then displayed his all-round hitting abilities to guide SRH home with the help of Nitish Kumar Reddy (21) and Salil Arora (30 not out off 10) in 18.4 overs.
Earlier, Rickelton's knock powered MI to 243 for five.
MI rode on a 93-run stand between Rickelton (123 not out off 55 balls) and Will Jacks (46 off 22) in 7.1 overs for the opening stand to power the side.
MI skipper Hardik Pandya scored a valuable 31 off 15 balls before being dismissed.
Praful Hinge (2/54), Eshan Malinga (1/29), Sakib Hasan (1/39) and Nitish Kumar Reddy (1/31) were the wicket-takers for SRH.
Brief Scores:
Mumbai Indian: 243 for 5 in 20 overs (Ryan Rickelton 123 not out; Praful Hinge 2/54).
Sunrisers Hyderabad: 249 for 4 in 18.4 overs (Travis Head 76, Heinrich Klaasen 65 not out; AM Ghazanfar 2/51).
