含羞草传媒

Spyware investigations involving U of T鈥檚 Citizen Lab reveal targets in El Salvador, Poland: Reports

a woman checks her cellphone

(Photo by Marco Piunti/Getty Images)

A joint investigation by the 含羞草传媒鈥檚 Citizen Lab and Access Now reveals that dozens of journalists and activists in El Salvador had their cellphones allegedly hacked by Israeli firm NSO Group鈥檚 Pegasus spyware. 

JSR
John Scott-Railton

The investigation, with the sophisticated spyware normally used to target criminals, was reported on by the , and other media outlets.

A sample of cases in the report were reviewed by Amnesty International鈥檚 Security Lab, which investigates cyberattacks against civil society. 

The alleged hacks took place between July 2020 and November 2021, a time of ongoing censorship of journalists who investigated the government of President Nayib Bukele.

鈥淭he aggressiveness and persistence of the hacking was jaw-dropping,鈥 John Scott-Railton, senior researcher at the Citizen Lab and an author of the report, told the Associated Press.

鈥淚鈥檝e seen a lot of Pegasus cases but what was especially disturbing in this case was its juxtaposition with the physical threats and violent language against the media in El Salvador.鈥

In a statement to Reuters, Bukele鈥檚 office said it is not a client of NGO Group and that some of the government鈥檚 top officials might have also had their phones hacked. 

The Citizen Lab, part of the Munk School of Global Affairs & Public Policy in U of T鈥檚 Faculty of Arts & Science, has been tracking victims of Pegasus spyware since 2016, helping to identify dozens of cases of inappropriate use. The technology has been used to eavesdrop on journalists, diplomats, lawyers, activists and politicians from the Middle East to Mexico.

Earlier this month, that Polish senator Krzysztof Brejza and two other Polish government critics were allegedly hacked by with the Pegasus spyware. The Citizen Lab and Amnesty International say the senator was allegedly hacked multiple times during the 2019 parliamentary elections.

There are also concerns closer to home.

Noura Aljizawi and Siena Anstis, researchers at the Citizen Lab, have interviewed 18 Canadian human rights activists about being the target of cyber attacks and misinformation campaigns, . Some worry that authorities aren鈥檛 doing enough to protect them.

鈥淭he silence of Canada is giving the attackers more space to launch an attack,鈥 Aljizawi told the Toronto Star.

The researchers say finding ways to stop the export of Canadian-developed technology to countries using it for cyber attacks and providing mental health resources for refugees are just a few of the ways to deal with this complex issue. To bring increased exposure to the dangers faced by newcomers and activists, the Citizen Lab is set to release a report investigating digital transnational repression in the coming months.

 
The Bulletin Brief logo

Subscribe to The Bulletin Brief

UTC