Israel to tighten supervision of cyber exports
JERUSALEM – Israel’s Defense Ministry on Monday announced that it’s tightening supervision over cyber exports in a move that follows a series of scandals involving Israeli spyware company NSO Group.
The ministry said the countries purchasing Israeli cyber technology would have to sign a declaration pledging to use the products “for the investigation and prevention of terrorist acts and serious crimes only.”
It said countries that violate the terms of use could be subject to sanctions, “including limiting the cyber system and/or disconnecting it.”
The announcement made no mention of NSO. But it came just days after it was revealed that 11 U.S. State Department employees were hacked with NSO spyware. The employees were located in Uganda and included some foreign service officers, said a person familiar with the matter, who was not authorized to speak publicly.
It was the first known instance of NSO Group’s trademark Pegasus spyware being used against U.S. government personnel.
Last month, the U.S. Commerce Department blacklisted NSO, barring the company from using U.S. technology. The blacklisting raised questions about NSO’s financial outlook and ability to survive, and the company acknowledged that it’s trying to reverse the decision.
Apple also sued NSO last week for its hacking of iPhones and other Apple products, calling the Israeli company “amoral 21st century mercenaries.” Facebook filed a lawsuit over similar allegations that its WhatsApp messaging system was intruded.
Pegasus allows its operator to gain access to a target’s mobile phone, including contacts, text messages and real-time communications.
NSO said it sells its technologies to governments only to battle crime and terrorism and that it has strict safeguards to prevent abuse. Company officials have acknowledged cutting off several customers due to misuse.
But human rights groups and outside researchers say the company’s safeguards are insufficient. They say customers have abused Pegasus to keep tabs on journalists, human rights activists and political dissidents from Mexico to Saudi Arabia to the Israeli-occupied West Bank. Critics have also accused Israel of lax oversight over the digital surveillance industry.
NSO declined to comment on the Defense Ministry guidelines. Last week, however, it said it had immediately shut down customers “potentially relevant” to the Uganda case. It also vowed to take legal action against customers if a violation of their contract was found.
Israel has previously said that cyber exports are limited to fighting crime and terrorism. Under the new guidelines, the ministry said the definitions “have been sharpened, in order to avoid blurring boundaries in this context.”