On July 27, 2022, Citizen Lab senior researcher John Scott-Railton spoke before the House Permanent Select Committee on Intelligence. He was invited to provide expert testimony on a hearing devoted to combatting threats to U.S. national security from the proliferation of foreign commercial spyware.
Our investigation uncovered an extensive Pegasus hacking operation against pro-democracy campaigners in Thailand. At least 30 forensically-confirmed victims of NSO Group’s Pegasus spyware between October 2020 and November 2021.
The Citizen Lab is at the forefront of investigating and reporting on abuses of mercenary spyware. Our submission highlights the capabilities of spyware and the nature of the spyware industry; how surveillance technology is used to violate fundamental human rights, and more particularly how it is related to enforced disappearances; and we provide recommendations for states, spyware companies, other businesses, civil society, and the Working Group.
The Citizen Lab, in collaboration with Catalan civil society groups, has identified at least 65 individuals targeted or infected with mercenary spyware, including members of the European Parliament, Catalan Presidents, legislators, jurists, and members of civil society organisations.
We confirm that in 2020 and 2021 we observed and notified the government of the United Kingdom of multiple suspected instances of Pegasus spyware infections within official UK networks, including the Prime Minister’s Office and the Foreign and Commonwealth Office.
The IATA Travel Pass (ITP), a global, opt-in app to receive, store, and share digital COVID-19 test certificates for flights, has a critical flaw in its registration process which allows an attacker to impersonate another user, needing only to know the user’s passport details but not possess the passport itself.
On April 13, the Citizen Lab published an analysis of the IATA Travel Pass. In this post, we discuss the significance of the report’s findings.
النتائج الرئيسية تم اختراق أجهزة أربعة مدافعين عن حقوق الإنسان، محاميين، وصحفيين أردنيين بواسطة برنامج التجسس بيغاسوس من مجموعة NSO في الفترة ما بين أغسطس 2019 و ديسمبر 2021. من ضمن المستهدفيين أفراد ناشطون في قضايا مكافحة الفساد في الأردن. اثنان من الأفراد المستهدفين نساء. نقدر أن اثنين على الأقل من المستهدفين الأربعة قد تم… Read more »
Phones belonging to four Jordanian human rights defenders, lawyers, and journalists were hacked with NSO Group’s Pegasus spyware between August 2019 and December 2021. We assess that at least two of the four targets were hacked by Pegasus operators primarily focused on Jordan, based on SMS messages containing Pegasus links that map to a cluster of domain names focusing on Jordanian themes.
هذا البعد الرقمي للقمع العابر للحدود – الذي نشير إليه بالقمع الرقمي العابر للحدود – أصبح بسرعة حجر الزاوية للقمع العابر للحدود بشكل يومي، ويشكل تهديدًا لحقوق وحريات المعارضين والنشطاء الذين يعيشون في المنفى.
