Victim of private spyware warns it can be used against US

Jul 27, 2022, 11:35 AM | Updated: Jul 31, 2022, 5:51 pm

WASHINGTON (AP) — Months after her father was lured back to Rwanda under false pretenses and jailed, Carine Kanimba discovered her own phone had been hacked using private spyware.

Kanimba is the youngest daughter of Paul Rusesabagina, who is credited with saving more than 1,200 lives during the 1994 Rwandan genocide in a story that inspired the movie “Hotel Rwanda.” An opponent of Rwandan President Paul Kagame, Rusesabagina is now serving a 25-year prison sentence on charges that he has dismissed as politically motivated.

Researchers have alleged Pegasus was used to spy on Kanimba and her cousin as Rusesabagina’s family was advocating for his release from Rwanda, which received $160 million in foreign aid from the United States in the last budget year.

“Unless there are consequences for countries and their enablers which abuse this technology, none of us are safe,” she told the House Intelligence Committee on Wednesday.

Kanimba and technology experts urged Congress to oppose the use of commercial spyware in the U.S. and discourage investment in spyware that has been used to hack the phones of dissidents, journalists, and even U.S. diplomats.

Pegasus infiltrates phones to control their camera and microphone and siphon off data without requiring the user to click on a malicious link. It is part of a burgeoning international market for states to acquire cyber tools that were once available only to the most technically advanced governments. Researchers at Google have identified at least 30 vendors selling “zero click” exploits or other spyware.

NSO Group says its software can’t be activated against phone numbers with a U.S. country code unless used by an American agency. But there are several documented reports of American officials and citizens having their data captured by Pegasus.

One committee member, Rep. Jim Himes, D-Conn., suggested that off-the-shelf spyware felt “like a very serious threat to our democracy and to democracies around the world.” Himes questioned whether spyware could be deployed from another country against American officials and he criticized companies that invest in it.

Among the investors in a private equity firm that held majority ownership of NSO Group were the Oregon state employee pension fund and the Alaska Permanent Fund Corporation.

U.S. officials and many lawmakers in both parties are concerned about foreign interference in future elections and the prospect of Americans trying to overturn a lawful vote by force.

“Nobody, not Mike Pence, not Nancy Pelosi, not Kevin McCarthy … are immune from having their most private deliberations watched,” Himes said. “And that may be just enough to interfere in our elections, just enough to end our democracy.”

U.S. law enforcement and intelligence agencies have long been in the market themselves for ways to hack into phones.

The Biden administration last year imposed export limits on NSO Group and three other firms. But the FBI has acknowledged buying a license for Pegasus for what it said was “product testing and evaluation only.” While spyware companies make huge profits in the Middle East and Europe, it is American business and investment that “legitimizes what they’re doing,” said John Scott-Railton, senior researcher at Citizen Lab, which has long studied how the programs work.

“Doing business with the U.S. government, getting acquired by a U.S. company or even doing business with an American police department is the golden price for many in the spyware industry,” he said. “As long as that remains as a possibility for problematic actors, they’re going to get support from investors.”

The committee is pushing U.S. spy agencies to “decisively act against counterintelligence threats posed by foreign commercial spyware,” according to the public version of its latest bill authorizing intelligence activities. The bill, which has not yet been voted on by the full House, proposes that the director of national intelligence “may prohibit” individual U.S. agencies from acquiring or using foreign commercial spyware.

But the bill would also allow any intelligence agency chief to seek a waiver from the director if the waiver “is in the national security interest of the United States.”

In a statement, NSO Group noted that the discussion over spyware “at times lacks balance (by) intentionally omitting their lifesaving benefits.”

“NSO reiterates that it thoroughly investigates any claim for illegal use of its technology by customers, and terminates contracts when illegal use is found,” the company said. “Nonetheless, it is critical to consider the benefits and alternatives to these critical technologies.”

Kanimba testified that she was alerted last year by a collective of journalists working with Citizen Lab and Amnesty International that there was reason to believe that she had been spied on. A subsequent forensic analysis of her phone revealed that she had been targeted by Pegasus spyware, she said.

She said the surveillance was triggered as she walked with her mother into a meeting with Belgium’s minister of foreign affairs – Rusesabagina holds Belgian citizenship and U.S. residency – and was active during calls with the State Department and with the office of the U.S. government’s special presidential envoy for hostage affairs.

Her family lives in San Antonio. Democratic Rep. Joaquin Castro, a committee member who represents that city, noted that his office’s communications may have been captured by Rwanda because he was advocating for Rusesabagina’s release.

Rwanda denies using Pegasus. Its embassy in Washington said in a statement Thursday that its response “has not changed regardless of who raises them.”

“These are politically motivated allegations aimed at undermining Rwanda’s judicial system and sowing disinformation,” the embassy statement said.

Rusesabagina was sentenced for terrorism offenses related to his alleged links to the armed wing of his opposition political platform. Rusesabagina has denied supporting violence and called the verdict a “sham.”

___

Associated Press writer Eric Tucker contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

(Facebook Photo/City of San Luis, Arizona)...
Associated Press

San Luis authorities receive complaints about 911 calls going across border

Authorities in San Luis say they are receiving more complaints about 911 calls mistakenly going across the border.
3 days ago
(Pexels Photo)...
Associated Press

Daylight saving time begins in most of US this weekend

No time change is observed in Hawaii, most of Arizona, Puerto Rico, the U.S. Virgin Islands, American Samoa, Guam and the Northern Marianas.
11 days ago
Mexican army soldiers prepare a search mission for four U.S. citizens kidnapped by gunmen in Matamo...
Associated Press

How the 4 abducted Americans in Mexico were located

The anonymous tip that led Mexican authorities to a remote shack where four abducted Americans were held described armed men and blindfolds.
11 days ago
Tom Brundy points to a newly built irrigation canal on one of the fields at his farm Tuesday, Feb. ...
Associated Press

Southwest farmers reluctant to idle farmland to save water

There is a growing sense that fallowing will have to be part of the solution to the increasingly desperate drought in the West.
18 days ago
A young bison calf stands in a pond with its herd at Bull Hollow, Okla., on Sept. 27, 2022. The cal...
Associated Press

US aims to restore bison herds to Native American lands after near extinction

U.S. officials will work to restore more large bison herds to Native American lands under a Friday order from Interior Secretary Deb Haaland.
18 days ago
Children play in a dried riverbed in Flassans-sur-Issole, southern France, Wednesday, March 1, 2023...
Associated Press

Italy, France confront 2nd year of western Europe drought

ROME (AP) — Bracing for Italy’s second consecutive year of drought for the first time in decades, Premier Giorgia Meloni huddled with ministers Wednesday to start mapping out an action plan Wednesday, joining France and other nations in western Europe grappling with scant winter rain and snow. Meloni and her ministers decided to appoint an […]
20 days ago

Sponsored Articles

(Photo by Michael Matthey/picture alliance via Getty Images)...
Cox Communications

Valley Boys & Girls Club uses esports to help kids make healthy choices

KTAR’s Community Spotlight focuses on the Boys & Girls Club of the Valley and the work to incorporate esports into children's lives.
...
Day & Night Air Conditioning, Heating and Plumbing

Company looking for oldest air conditioner and wants to reward homeowner with new one

Does your air conditioner make weird noises or a burning smell when it starts? If so, you may be due for an AC unit replacement.
...
Quantum Fiber

Stream 4K and more with powerful, high-speed fiber internet

Picking which streaming services to subscribe to are difficult choices, and there is no room for internet that cannot handle increased demands.
Victim of private spyware warns it can be used against US