Thursday, July 29, 2021

Firm that owns Israel's spyware company NSO to be liquidated

BY FRENCH PRESS AGENCY - 
AFP PARIS
MID-EAST
JUL 28, 2021 

A woman uses her phone in front of the building housing the Israeli company NSO Group, in Herzliya, near Tel Aviv, Israel, Aug. 28, 2016. (AFP Photo)

Aprivate equity company that owns the NSO Group, the Israeli firm at the center of the Pegasus spyware scandal, is being liquidated, a source shared.

London-based Novalpina Capital, which bought the NSO Group in 2019, is being dissolved after a dispute between its co-founders, the source told Agence France-Presse (AFP) on Wednesday.

Its liquidation leaves the future ownership of NSO unclear, just as the company is grappling with the fallout of a vast electronic espionage scandal.

Novalpina also owns the Estonian casino group Olympic Entertainment and French pharmaceutical company X.O.

The Financial Times reported that Novalpina's investors "have until Aug. 6 to decide whether to liquidate the fund with a fire sale of its assets, or appoint a third party to take control of it."

French business daily Les Echos reported that Novalpina was being liquidated to put an end to an "internal war" between its founders.

But "the espionage scandal may have been the straw that broke the camel's back," it added.

The NSO Group has been at the center of a storm this month after an international media investigation claimed its Pegasus software was used to spy on the phones of human rights activists, journalists and even heads of state.

NSO has denied any wrongdoing, labeling the allegations "false."

It insists its software is intended for use only in fighting terrorism and other crimes.

Israeli Defense Minister Benny Gantz was due to leave Wednesday for Paris, where he is set to discuss the scandal with his French counterpart Florence Parly.

French President Emmanuel Macron has changed his phone after his number appeared on a list of potential targets.

Israeli Government Visits NSO Group Amidst Spyware Claims

Meeting Comes After World Leaders Appear on Alleged 'Pegasus' Targeting List

The Israeli government paid a visit on Wednesday to NSO Group, the controversial company whose spyware has been alleged to have been covertly installed on the mobile devices of journalists and activists.

See Also: Live Webinar | Improve Cloud Threat Detection and Response using the MITRE ATT&CK Framework

Officials from Israel's Ministry of Defense visited NSO Group, according to Calcalist.co.il. The visit was pre-arranged, the publication reported, and it did not include an audit or examination of computer systems or documents.

In a statement, NSO Group says that it can "confirm that representatives from the Israeli Ministry of Defense visited our offices. We welcome their inspection. The company is working in full transparency with the Israeli authorities."

“We are confident that this inspection will prove the facts are as declared repeatedly by the company against the false allegations made against us in the recent media attacks," NSO Group says.

The visit is a sign that the latest allegations against NSO Group are in turn causing pressure on Israel. Calls have grown stronger from around the world for the country to take a closer look into NSO Group's sales of Pegasus, a powerful type of spyware that can silently infect mobile devices (see Pegasus Spyware: World Leaders Demand Israeli Probe).

France has pressed Israel to investigate. Also, four U.S. Democratic lawmakers called for the "hacker for hire" industry to be brought under control and sanction implemented for companies that sell spyware to authoritarian states.

A recent investigation unveiled by Amnesty International and Forbidden Stories, a French based nonprofit group, allege that Pegasus is sold to governments which then turn it on dissidents, journalists and activists. NSO Group maintains the software is only used for legitimate and authorized law enforcement activities, include combating crime and terrorism (see Leak of Alleged Pegasus Target List Restokes Spyware Debate).

Controversial Leak

The findings of Amnesty and Forbidden Stories were based on a leak of a list of 50,000 phone numbers. The groups say the list represents phone numbers of people who may have been targeted by Pegasus. The source of the list has not been revealed.

Forensic investigators with Amnesty's Security Lab say 37 devices connected with numbers on the list showed signs of either being targeted or infected with Pegasus.

Those attacks appear to take place using network injection techniques or possible zero-day vulnerabilities in applications such as Apple's iMessage, Photos and Music, the research contends. The attacks using iMessage appear to be so-called "zero click" attacks, which means no interaction from the user is needed to infect a device (see Spyware Exposé Highlights Suspected Apple Zero-Day Flaws).

Although it has been alleged that NSO Group's software has been misused by its clients, what elevated the situation this time is the presence of phone numbers of high-profile leaders on the list.

The numbers include presidents such as France's Emmanuel Macron, Iraq's Barham Salih and South Africa's Cyril Ramaphosa. There are also three current prime ministers: Pakistan's Imran Khan, Egypt's Mostafa Madbouly and Morocco's Saad-Eddine El Othmani. Seven former prime ministers are on the list and one king, Morocco's Mohammed VI.

NSO Group says the list does not come from the company and is not a targeting list. The company maintains that it complies with Israel's export regulations, which controls how cyber weapons are sold. NSO has said it has around 45 government customers that target around 100 people per year.


No comments: