Google, the internet giant, has identified numerous surveillance software companies that are aiding the use of harmful hacking tools, and has urged the United States and its allies to take action against the spyware industry. These companies often claim that their products are intended for use by governments for national security purposes, but the technology has been repeatedly misused to hack the phones of civil society, political opposition and journalists. The spyware industry has come under increased scrutiny since the discovery of NSO’s Pegasus spyware on the phones of various people globally, including human rights defenders.
Google researchers have published a report stating that while NSO is well-known, there are several smaller firms contributing to the proliferation of spy technology for malicious purposes. The findings are significant because Google has vast visibility into hacking campaigns worldwide, given the vast breadth of its online offerings.
In the report, the Google researchers have named a roster of firms that provide a range of services to hack into phones and have been evolving to bypass the latest security measures by Apple and Google for their phone operating systems iOS and Android. The Italian firms Cy4Gate and RCS Labs, Greek company Intellexa, and the lesser-known Italian company Negg Group and Spain’s Variston are among them.
Google has found that these companies are developing increasingly sophisticated tools that are weakening the safety of the internet for all. The private sector is now responsible for a significant portion of the most sophisticated tools detected. Last year, the United States and several of its allies pledged to work towards curbing the surveillance software industry, following the discovery that at least 50 US government employees in ten countries had been targeted by spyware.
The report comes a day after the United States announced a new visa restriction policy for those who misuse commercial spyware. This policy allows for the imposition of restrictions on individuals who are believed to have been involved in the abuse of commercial spyware, as well as those who facilitate such actions and benefit from them. Google welcomed this move, stating that “Limiting spyware vendors’ ability to operate in the U.S. helps to change the incentive structure which has allowed their continued growth.”