Biden Administration Tackles Phone-Hacking Spyware: A Growing Threat to National Security and Human Rights
The Biden administration has taken a decisive step in the fight against phone-hacking spyware by welcoming six new countries to a US-led pact aimed at combating this malicious technology. According to sources familiar with the matter, US officials continue to uncover instances of American government personnel being targeted by this national security and counterintelligence threat (News Finder).
Identifying the Extent of the Issue
A US National Security Council official informed News Finder that efforts to identify and confirm cases of targeted government personnel have been intensified. Last year, the administration had reported 50 instances of such cases; however, the official declined to disclose the current number but emphasized that the risks posed by spyware remain high.
Spyware, a malicious software, is designed to infiltrate mobile phones, transforming them into listening devices while gathering contacts and other sensitive information. The global market for commercial spyware has seen exponential growth over the last decade, with companies from Israel to North Macedonia advertising their services. Many governments have been eager buyers.
Countering the Threat: Diplomatic Efforts
A significant aspect of the US strategy to combat spyware involves persuading allies not to do business with companies whose tools could potentially be used against US diplomats or for surveilling dissidents and journalists on American soil.
Two countries, Poland and Ireland, which have allegedly been involved in spyware abuse in the past, are among the newest signatories of the anti-spyware pact. Poland’s prime minister has claimed that the previous government used spyware on a long list of victims, while the US Treasury Department recently sanctioned an Ireland-based company for its alleged role in the spyware business.
Expanding the Coalition
Joining Poland and Ireland are Finland, Germany, Japan, and South Korea. The White House will officially announce this new development during the Summit for Democracy, an annual gathering of democratic governments from around the world, to be held in Seoul.
Eleven countries, including the US and its Five Eyes allies, signed onto the pledge last year, committing that “any commercial spyware use by our governments is consistent with respect for universal human rights, the rule of law, and civil rights and civil liberties.”
The Alarming Discovery
Senior counterintelligence and national security officials were alarmed when they discovered that dozens of US government personnel had been targeted by invasive commercial spyware more than two years ago. These victims included a dozen State Department employees in Africa whose iPhones were hacked using software from Israeli firm NSO Group.
Governments using spyware on US personnel may be attempting to collect intelligence or surveil individuals meeting with diplomats from their own countries. The risk is significant: some spyware vendors have close relationships or are controlled by foreign governments.
Prevalence and Response
At least 74 countries have contracted with private firms for commercial spyware. US intelligence agencies reported this in their annual threat assessment this month. A comprehensive government-wide study on the risks of spyware to US interests was launched, including an investigation into whether US intelligence and law enforcement agencies were contracting with these very spyware firms.
Addressing the Issue
The Biden administration’s review did not find widespread use of commercial spyware by federal agencies but expressed concern over aggressive marketing efforts by these vendors. The FBI, for example, purchased a testing license for NSO Group’s Pegasus software, although it has not used it in investigations.
In response, the White House issued an executive order last year barring agencies from using spyware deemed a national security threat or implicated in human rights abuses. The administration has also sanctioned and restricted visas for spyware vendors, as well as barred US companies from doing business with them.
Continuing Challenges and Concerns
Spyware companies often conceal their corporate structures to stay in business. White House officials recently met with US venture capital firms to warn them about unintentionally fueling the growth of spyware through their investments.
The Biden administration is aware of the challenges and remains committed to combating this threat while promoting international cooperation on human rights, the rule of law, and cybersecurity.