AP

Victim of private spyware warns it can be used against US

Jul 27, 2022, 11:35 AM | Updated: Jul 31, 2022, 5:51 pm

WASHINGTON (AP) — Months after her father was lured back to Rwanda under false pretenses and jailed, Carine Kanimba discovered her own phone had been hacked using private spyware.

Kanimba is the youngest daughter of Paul Rusesabagina, who is credited with saving more than 1,200 lives during the 1994 Rwandan genocide in a story that inspired the movie “Hotel Rwanda.” An opponent of Rwandan President Paul Kagame, Rusesabagina is now serving a 25-year prison sentence on charges that he has dismissed as politically motivated.

Researchers have alleged Pegasus was used to spy on Kanimba and her cousin as Rusesabagina’s family was advocating for his release from Rwanda, which received $160 million in foreign aid from the United States in the last budget year.

“Unless there are consequences for countries and their enablers which abuse this technology, none of us are safe,” she told the House Intelligence Committee on Wednesday.

Kanimba and technology experts urged Congress to oppose the use of commercial spyware in the U.S. and discourage investment in spyware that has been used to hack the phones of dissidents, journalists, and even U.S. diplomats.

Pegasus infiltrates phones to control their camera and microphone and siphon off data without requiring the user to click on a malicious link. It is part of a burgeoning international market for states to acquire cyber tools that were once available only to the most technically advanced governments. Researchers at Google have identified at least 30 vendors selling “zero click” exploits or other spyware.

NSO Group says its software can’t be activated against phone numbers with a U.S. country code unless used by an American agency. But there are several documented reports of American officials and citizens having their data captured by Pegasus.

One committee member, Rep. Jim Himes, D-Conn., suggested that off-the-shelf spyware felt “like a very serious threat to our democracy and to democracies around the world.” Himes questioned whether spyware could be deployed from another country against American officials and he criticized companies that invest in it.

Among the investors in a private equity firm that held majority ownership of NSO Group were the Oregon state employee pension fund and the Alaska Permanent Fund Corporation.

U.S. officials and many lawmakers in both parties are concerned about foreign interference in future elections and the prospect of Americans trying to overturn a lawful vote by force.

“Nobody, not Mike Pence, not Nancy Pelosi, not Kevin McCarthy … are immune from having their most private deliberations watched,” Himes said. “And that may be just enough to interfere in our elections, just enough to end our democracy.”

U.S. law enforcement and intelligence agencies have long been in the market themselves for ways to hack into phones.

The Biden administration last year imposed export limits on NSO Group and three other firms. But the FBI has acknowledged buying a license for Pegasus for what it said was “product testing and evaluation only.” While spyware companies make huge profits in the Middle East and Europe, it is American business and investment that “legitimizes what they’re doing,” said John Scott-Railton, senior researcher at Citizen Lab, which has long studied how the programs work.

“Doing business with the U.S. government, getting acquired by a U.S. company or even doing business with an American police department is the golden price for many in the spyware industry,” he said. “As long as that remains as a possibility for problematic actors, they’re going to get support from investors.”

The committee is pushing U.S. spy agencies to “decisively act against counterintelligence threats posed by foreign commercial spyware,” according to the public version of its latest bill authorizing intelligence activities. The bill, which has not yet been voted on by the full House, proposes that the director of national intelligence “may prohibit” individual U.S. agencies from acquiring or using foreign commercial spyware.

But the bill would also allow any intelligence agency chief to seek a waiver from the director if the waiver “is in the national security interest of the United States.”

In a statement, NSO Group noted that the discussion over spyware “at times lacks balance (by) intentionally omitting their lifesaving benefits.”

“NSO reiterates that it thoroughly investigates any claim for illegal use of its technology by customers, and terminates contracts when illegal use is found,” the company said. “Nonetheless, it is critical to consider the benefits and alternatives to these critical technologies.”

Kanimba testified that she was alerted last year by a collective of journalists working with Citizen Lab and Amnesty International that there was reason to believe that she had been spied on. A subsequent forensic analysis of her phone revealed that she had been targeted by Pegasus spyware, she said.

She said the surveillance was triggered as she walked with her mother into a meeting with Belgium’s minister of foreign affairs – Rusesabagina holds Belgian citizenship and U.S. residency – and was active during calls with the State Department and with the office of the U.S. government’s special presidential envoy for hostage affairs.

Her family lives in San Antonio. Democratic Rep. Joaquin Castro, a committee member who represents that city, noted that his office’s communications may have been captured by Rwanda because he was advocating for Rusesabagina’s release.

Rwanda denies using Pegasus. Its embassy in Washington said in a statement Thursday that its response “has not changed regardless of who raises them.”

“These are politically motivated allegations aimed at undermining Rwanda’s judicial system and sowing disinformation,” the embassy statement said.

Rusesabagina was sentenced for terrorism offenses related to his alleged links to the armed wing of his opposition political platform. Rusesabagina has denied supporting violence and called the verdict a “sham.”

___

Associated Press writer Eric Tucker contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Lead water pipes pulled from underneath the street are seen in Newark, N.J., Oct. 21, 2021. (AP Pho...

Associated Press

Biden to require cities to replace harmful lead pipes within 10 years

The Biden administration has previously said it wants all of the nation's roughly 9 million lead pipes to be removed, and rapidly.

5 days ago

Facebook's Meta logo sign is seen at the company headquarters in Menlo Park, Calif., on, Oct. 28, 2...

Associated Press

Meta shuts down thousands of fake Facebook accounts that were primed to polarize voters ahead of 2024

Meta said it removed 4789 Facebook accounts in China that targeted the United States before next year’s election.

5 days ago

A demonstrator in Tel Aviv holds a sign calling for a cease-fire in the Hamas-Israel war on Nov. 21...

Associated Press

Hamas releases a third group of hostages as part of truce, and says it will seek to extend the deal

The fragile cease-fire between Israel and Hamas was back on track Sunday as the first American was released under a four-day truce.

10 days ago

Men look over the site of a deadly explosion at Al-Ahli Hospital in Gaza City, Wednesday, Oct. 18, ...

Associated Press

New AP analysis of last month’s deadly Gaza hospital explosion rules out widely cited video

The Associated Press is publishing an updated visual analysis of the deadly Oct. 17 explosion at Gaza's Al-Ahli Hospital.

13 days ago

Peggy Simpson holds a photograph of law enforcement carrying Lee Harvey Oswald's gun through a hall...

Associated Press

JFK assassination remembered 60 years later by surviving witnesses to history, including AP reporter

Peggy Simpson is among the last surviving witnesses who are sharing their stories as the nation marks the 60th anniversary.

13 days ago

Israeli Prime Minister Benjamin Netanyahu, chairs the weekly cabinet meeting in Jerusalem, Sunday, ...

Associated Press

Israeli Cabinet approves cease-fire with Hamas; deal includes release of 50 hostages

Israel’s Cabinet on Wednesday approved a cease-fire deal with the Hamas militant group that would bring a temporary halt to a devastating war.

14 days ago

Sponsored Articles

...

Dierdre Woodruff

Interest rates may have peaked. Should you buy a CD, high-yield savings account, or a fixed annuity?

Interest rates are the highest they’ve been in decades, and it looks like the Fed has paused hikes. This may be the best time to lock in rates for long-term, low-risk financial products like fixed annuities.

Follow @KTAR923...

West Hunsaker at Morris Hall supports Make-A-Wish Foundation in Arizona

KTAR's Community Spotlight this month focuses on Morris Hall and its commitment to supporting the Make-A-Wish Foundation in Arizona.

...

SCHWARTZ LASER EYE CENTER

Key dates for Arizona sports fans to look forward to this fall

Fall brings new beginnings in different ways for Arizona’s professional sports teams like the Cardinals and Coyotes.

Victim of private spyware warns it can be used against US