I'm not sure I understand. Were these Whatsapp and email accounts compromised because there was just a very high level of customization and tailoring in the phishing emails?
The story about the cam and mic being activated suggests some deeper hacking of Android and iOS themselves? I agree some more technical details would have been nice.
And more news like this. I have been told by a WhatsApp admin who runs a news group how the police took his mobile phone and returned it back after some time and he has been warned multiple times to not post any news critical to india.
I believe they install this nso spyware or something similar on their phones so they get to know what is spreading and who is doing what.
i have friends who have been pulled from a public bus, their phones checked and one guy was beaten for having a vpn app and another one was forced to show his whatsapp when they proceeded to beat him for having "incendiary content". basically photos and memes critical of government
just a few days ago this kid was killed, heck his throat was first slit. the police say he joined militancy on 18th june but locals say he played cricket and scored runs on 28th of june so who knows.
then you have multiple times when the army and the police was found to have conducted fake encounters where they killed innocent civilians in the name of getting prize money.
few week ago there was the grenade attack in srinagar but that was immediately after the all party meeting with the drone attack that caused another stir.locals belive these are diversionary tactics.
oh there definitely is. You see, when you talk about activism and taking a stand which is usually cried on online forums or even on the streets, people assume the police would obey the spirit of the law. Remember what happened to occupy wall street protestors?
same thing. if you are against the establishment in this part of the world, you are a target and a dead man.
heck, last year a lawyer was murdered when guys entered his home and killed him. they left and no one was found. this guy had been critical of powerful people so they took him out
I would argue that since snowden, assange, manning...oh and let's not forget bezos, just a completely un-informed and un-intersted person would not know that.
The website features a platform for exploring over 1,000 "NSO-related activities, and demonstrates new connections and patterns between ‘digital violence’ using Pegasus and real-world violence directed at lawyers, activists, and other civil society figures":
https://www.digitalviolence.org/#/explore
You realize that 1) the website is critical to the NSO group, and 2) you can have more than one separate/independent browser session on your computer to browser stuff on your computer?
Forensic architecture is known for years to make visually fancy stuff (e.g. the films and exhibitions which they show for roughly the past decade in the art context throughout Europe, for example at the last Documenta). For them to develope a website that uses a lot of javascript is somewhat ironic, but not surprising.
Is it me or this website is unusable with slightly restrictive javascript policies? My fans start screaming, i'm getting disfunctional menus at the bottom and a scroller at the top. I deactivated decentraleyes and umatrix, only thing is ublock and my restrictive firefox base profile.
So I’m not sure what I’m supposed to be seeing on my iPhone but all I get is black background and the hint of fancy animation effects that I’m not following. Is there a transcript or something?
I was able to get the site functioning with uMatrix still operating by using the vertical three dot menu and disabling referer spoofing. Even then it wasn't clear how to get to the content, since all that shows is a huge map with a timeline of events.
Apologies for this — the website features some pretty heavy WebGL visualizations. I've pushed an updated version with more aggressive code-splitting and a <noscript /> version of the website. If you'd like, try it out and let me know if it works any better.
Have said before that the economics for companies like NSO are favorable because countries and regimes with resource wealth, who do not need to maintain a sophisticated civil service to stay in power, need the technical capability that such a platform provides. Companies like this provide that. It's a domestic spy agency as a service.
Awful? Absolutely, but I'd argue these objections reduce to "interception capabilities for me and not for thee," as western domestic spy agencies can just send a fax to your telco and get the same access. That is, the U.S. doesn't need NSO because it has the FISA stamp pad.
I'm very much a privacy advocate who has in one way or another worked closely to the key surveillance issues of the day for years, and so to defend NSO at all feels absurd, but the devil must be given his due.
Sure, NSO and the former HackingTeam and even Stratfor were great activist targets, but from the perspective of a state or a regime who buys an NSO-like service, N-GO's are just another foreign funded operator fighting a proxy war for policy leverege on behalf of their home governments and companies. They aren't secular colonial missionaries, (or perhaps, that's precisely what they are) they're running a playbook[1].
It's hard to separate NSO from Israeli policy because of how close their industry and military are linked, but I also think the objections to Israel's involvement itself reduce to how it is the last new free and independent nation state in a time where the nation state as thing itself is being wound up by the very class of academics/NGO's who militate against Israel's sovereignty. The academic/NGO anti-Israel thing has a lot of old entrenched anti-semitism, but the most reliable filter to identify what bothers them about Israel's involvement in this platform is NGOs are motivated by academic anti-sovereignty. These spy agencies as a service like NSO provide sovereignty to unfavorable countries, and Israel benefits strategically from preserving the sovereignty of nation states, no matter how repugnant. That's a painful steelman argument to make on behalf of the very abusive surveillance I have worked personally in my career to prevent, but when I see what amounts to selective privacy astroturfing using artists I like as propaganda mascots, the whole thing leaves a bad taste.
The skepticism I had with the university affiliated project that first uncovered Pegasus was they seemed really interested in foreign abuses but had not done anything on domestic surveillance issues, or even investigated those countries' influence on their own, which made them a para-governmental org using the cover of a loosely academic NGO to play spy games. To me the whole enterprise is seedy.
The concern is likely over whether supply creates its own demand. In other words will the commodification of state surveillance technology encourage suppliers to manipulate the environment to create more purchasers in a manner that transcends the original limited desire of host republics to defend residents from domination. In other words will the actions taken in pursuit of a mission lead to outcomes in conflict with the original mission.
It's a fair view, as we bring these things into being. "What was once thought cannot be unthought," sort of thing, and having a tech at all means the economics of using it for evil itself becomes viable. The argument back is, "if it wasn't us, it would be someone else who did it," which is a self justifying slippery slope, and then we get into the conflict between the ideal of not doing evil vs. doing it first so nobody can do it to you, and being good is meaningless if you are dead or don't prevail to preserve it.
I genuinely believe (perhaps naively) that there are good people, and we do crafty things to pursue our interests, but we punch the clock out at some point and respect that the battle of our conflicting interests must cease so we can return to being people. This is predicated on the idea that we are just humans recognizing we are dealing with other humans, and we will find an equillibrium of interests at some point. Where that breaks down is when we lose sight of that and just start to exterminate each other for its own sake by all deceptive and mendacious means necessary. For that you have to give up your own humanity first. Maybe that view is as quaint as the famously naive "gentlemen do not read each others' mail," statement, but without some guiding humanity, we might as well just use biological warfare because the only thing stopping using that is polite convention. Some rulers have been content to rule over slaves and disposable subjugated automatons reduced to living like animals, but their ambition is meaningless and unsatisfying because without some assent, they do not rule over people. When you have subjugated a people, the only solution is to find more people to subjugate. It's on everyone else to engage in total war to prevent that from happening, imo.
That's a big philosophical hope statement, but in terms of the ethics of building these tools, the truly evil empires have their own infrastructure, and don't need tools like those made by the NSO's of the world. Globally, and species wise, NSO's clients aren't the problem.
Not sure why that is although, admittedly, I've had little time to do much in the way of cross-browser testing. The website features some pretty heavy WebGL visualizations. I've pushed an updated version with more aggressive code-splitting and a <noscript /> version of the website. If you'd like, try it out and let me know if it works any better.
38 comments
[ 3.5 ms ] story [ 80.8 ms ] threadEdit: Was meant as reply to noduerme
And more news like this. I have been told by a WhatsApp admin who runs a news group how the police took his mobile phone and returned it back after some time and he has been warned multiple times to not post any news critical to india.
I believe they install this nso spyware or something similar on their phones so they get to know what is spreading and who is doing what.
https://www.reuters.com/article/us-india-kashmir-internet-id...
i have friends who have been pulled from a public bus, their phones checked and one guy was beaten for having a vpn app and another one was forced to show his whatsapp when they proceeded to beat him for having "incendiary content". basically photos and memes critical of government
just a few days ago this kid was killed, heck his throat was first slit. the police say he joined militancy on 18th june but locals say he played cricket and scored runs on 28th of june so who knows.
then you have multiple times when the army and the police was found to have conducted fake encounters where they killed innocent civilians in the name of getting prize money.
few week ago there was the grenade attack in srinagar but that was immediately after the all party meeting with the drone attack that caused another stir.locals belive these are diversionary tactics.
The website features a platform for exploring over 1,000 "NSO-related activities, and demonstrates new connections and patterns between ‘digital violence’ using Pegasus and real-world violence directed at lawyers, activists, and other civil society figures": https://www.digitalviolence.org/#/explore
Especially if it mentions NSO Grouo!
This is kind of stupid.
I was able to get the site functioning with uMatrix still operating by using the vertical three dot menu and disabling referer spoofing. Even then it wasn't clear how to get to the content, since all that shows is a huge map with a timeline of events.
Awful? Absolutely, but I'd argue these objections reduce to "interception capabilities for me and not for thee," as western domestic spy agencies can just send a fax to your telco and get the same access. That is, the U.S. doesn't need NSO because it has the FISA stamp pad.
I'm very much a privacy advocate who has in one way or another worked closely to the key surveillance issues of the day for years, and so to defend NSO at all feels absurd, but the devil must be given his due.
Sure, NSO and the former HackingTeam and even Stratfor were great activist targets, but from the perspective of a state or a regime who buys an NSO-like service, N-GO's are just another foreign funded operator fighting a proxy war for policy leverege on behalf of their home governments and companies. They aren't secular colonial missionaries, (or perhaps, that's precisely what they are) they're running a playbook[1].
It's hard to separate NSO from Israeli policy because of how close their industry and military are linked, but I also think the objections to Israel's involvement itself reduce to how it is the last new free and independent nation state in a time where the nation state as thing itself is being wound up by the very class of academics/NGO's who militate against Israel's sovereignty. The academic/NGO anti-Israel thing has a lot of old entrenched anti-semitism, but the most reliable filter to identify what bothers them about Israel's involvement in this platform is NGOs are motivated by academic anti-sovereignty. These spy agencies as a service like NSO provide sovereignty to unfavorable countries, and Israel benefits strategically from preserving the sovereignty of nation states, no matter how repugnant. That's a painful steelman argument to make on behalf of the very abusive surveillance I have worked personally in my career to prevent, but when I see what amounts to selective privacy astroturfing using artists I like as propaganda mascots, the whole thing leaves a bad taste.
The skepticism I had with the university affiliated project that first uncovered Pegasus was they seemed really interested in foreign abuses but had not done anything on domestic surveillance issues, or even investigated those countries' influence on their own, which made them a para-governmental org using the cover of a loosely academic NGO to play spy games. To me the whole enterprise is seedy.
[1] https://www.amazon.com/Dictatorship-Democracy-Gene-Sharp/dp/...
I genuinely believe (perhaps naively) that there are good people, and we do crafty things to pursue our interests, but we punch the clock out at some point and respect that the battle of our conflicting interests must cease so we can return to being people. This is predicated on the idea that we are just humans recognizing we are dealing with other humans, and we will find an equillibrium of interests at some point. Where that breaks down is when we lose sight of that and just start to exterminate each other for its own sake by all deceptive and mendacious means necessary. For that you have to give up your own humanity first. Maybe that view is as quaint as the famously naive "gentlemen do not read each others' mail," statement, but without some guiding humanity, we might as well just use biological warfare because the only thing stopping using that is polite convention. Some rulers have been content to rule over slaves and disposable subjugated automatons reduced to living like animals, but their ambition is meaningless and unsatisfying because without some assent, they do not rule over people. When you have subjugated a people, the only solution is to find more people to subjugate. It's on everyone else to engage in total war to prevent that from happening, imo.
That's a big philosophical hope statement, but in terms of the ethics of building these tools, the truly evil empires have their own infrastructure, and don't need tools like those made by the NSO's of the world. Globally, and species wise, NSO's clients aren't the problem.
... along with video investigations narrated by Edward Snowden ...
Huh, that's quite a pleasant surprise
This is the sad state of the web today
I’m examining the scripts now.
However, there is a blob of JavaScript that doesn’t load into urlscan. Highly suspect.
Is this some watering hole?
I refused to click the link, seeing all the comments about a JS heavy website that was making fans spin, talking about NSO.
Checking the WHOIS shows a 2 week old domain owned by a masked entity.
- - -
Registry Expiration: 2022-06-14 10:48:17 UTC Updated: 2021-06-15 23:38:22 UTC Created: 2021-06-14 10:48:17 UTC
Name: Contact Privacy Inc. Customer 0161891249