The Jerusalem Post

Has NSO phone hacking co. finally gone transparen­t?

Creator of Pegasus reveals some inner workings

- ANALYSIS • By YONAH JEREMY BOB

Cybersecur­ity company NSO Group on Wednesday night made its strongest effort yet to address criticism that its Pegasus software for hacking cellphones has been used to hack and oppress human rights activists in its client-countries.

While the company highlights its successes in blocking ISIS terror attacks and cracking drug and pornograph­y rings in Europe, Africa and Oceania, critics have said its software has been used to abuse human rights in Mexico, Morocco and elsewhere.

In December 2019, NSO revealed to The Jerusalem Post that it had canceled contracts with three clients at a loss of NIS 250 million.

In the report released on Wednesday, NSO updated those numbers to five clients since 2016 at a loss of $100 million or NIS 330m.

The report also discloses that in 2020, “NSO conducted 12 product misuse investigat­ions and preliminar­y reviews, all but one following reports from external whistleblo­wers or media and NGO reports.”

In 2020, “out of the twelve reports raised through our external and internal whistle-blowing processes: NSO conducted five investigat­ions into product misuse on four continents, with the guidance of external advisors.”

Next, NSO said, “Of the five: One case resulted in terminatio­n of NSO’s relationsh­ip with the End Customer. Two resulted in the required implementa­tion of additional mitigation measures. Two are still being reviewed.”

“For the remaining seven reports, following our preliminar­y review, we could not identify sufficient informatio­n to conduct investigat­ions despite our efforts or the report clearly was not related to the use of our system,” said NSO.

Next, NSO said it has an advisory board that has vetoed doing business with 55 countries.

The advisory board has three NSO senior officials and two Novalpina Capital (its main investor-partner) senior officials.

One of the NSO officials is General Counsel Shmuel Sunray, who has significan­t prior legal and security establishm­ent credential­s.

The rules of the advisory board potentiall­y allow the Novalpina investors or Sunray to veto or slow certain deals.

There are also a range of senior legal experts whom Sunray consults who have serious background­s in civil society issues.

In addition: “From May 2020 through April 2021, approximat­ely 15% of potential new opportunit­ies for Pegasus were rejected because of human rights concerns that could not be resolved.

“In certain instances, in highrisk regions, NSO has either rejected certain opportunit­ies (e.g., in Asia-Pacific and the Middle East) or deferred opportunit­ies (e.g., Africa),” said the report.

In terms of what NSO says it has in its contracts – and it shared several contract provisions – and its due diligence procedures and human rights training for employees, it checks the boxes human rights experts would want.

The question is what all of the above facts mean underneath, something NSO itself admits it cannot or will not fully answer.

For example, NSO stated, “but we are aware that due diligence, and even strong contractua­l provisions, are no guarantee that our products in every instance will be used consistent­ly with responsibl­e business conduct.

“Those concerns are heightened because we are unable to monitor immediate use, and have not yet determined whether there could be a technologi­cal solution to prevent customers from targeting vulnerable population­s,” said the report.

It is unclear what steps NSO has taken to see if it can better track how its clients might abuse its technology.

Considerin­g that criticism of NSO has lingered for some years, if NSO is suggesting that tracking its clients’ potential abuses is possible, a better understand­ing of the status of this project could be crucial to judging NSO’s overall efforts.

Also, NSO does not name a single bad-actor client, leaving no way for anyone else besides Israel’s Defense Ministry, Bulgaria and Cyprus (the three countries from which NSO exports) to perform oversight or check its data.

Moreover, NSO said, “a number of inherent challenges remain given the nature of our customers. Because of the strict confidenti­ality requiremen­ts of our customers, we are unable to provide actual or alleged victims with informatio­n about adverse impacts or implemente­d remediatio­n, or even acknowledg­e relationsh­ips with specific customers.”

“Even where we identify product misuse, we cannot breach these confidenti­ality requiremen­ts. While we cooperate with states to try to ensure that when abuses occur within their jurisdicti­ons those affected have access to an effective remedy, the confidenti­ality restrictio­ns limit our ability to do much more,” said NSO.

Other interestin­g statistics include NSO’s detailing that it has: 60 customers in 40 countries with a breakdown of 51% intelligen­ce agencies, 38% law enforcemen­t and 11% military customers.

The solo exhibition ‘Here and Now,’ by Israeli artist Carmel Ilan, opened recently.

The exhibition is on display at the Ma Jolie Café, a new gallery in Neve Tzedek owned by businesswo­man Ruth Sheetrit, that features local contempora­ry art. The new gallery bears the name of one of Pablo Picasso’s famous works. The gallery also features a café, and the works on display are for sale, with a portion of the proceeds going to support local art. The current exhibition was inspired by Japanese haiku poetry. Carmel Ilan has created works that depict the fragility of the here and now of the moment and examine the significan­ce of paper in the digital age.

Arriving to offer congratula­tions on the opening of the new gallery, and impressed by its contents: The gallery owner’s husband - former Minister Meir Sheetrit, and her brother, Minister of Welfare Meir Cohen; Former Prime Minister Ehud Barak and Nili Priel, Dudi and Bruria Weissman, Danny Tokatli, Ram Landes and others.

 ?? (Damir Sagolj/Reuters) ?? NSO GROUP says it has an advisory board to that can veto doing business with a specific country based on human rights concerns.
(Damir Sagolj/Reuters) NSO GROUP says it has an advisory board to that can veto doing business with a specific country based on human rights concerns.
 ??  ?? RUTH SHEETRIT, Carmel Ilan and Meir Sheetrit. (Aviv Hofi)
RUTH SHEETRIT, Carmel Ilan and Meir Sheetrit. (Aviv Hofi)

Newspapers in English

Newspapers from Israel