A new report has found that Russia used an Israeli cyber surveillance tool to crack a target's phone months after the contract for the tool was supposedly cancelled. The findings raise serious questions about the effectiveness of export controls on powerful spyware.
Details of the Incident
According to a joint investigation by several media outlets, the Israeli company NSO Group's Pegasus spyware was used by Russian hackers to break into the phone of a journalist in 2021. This occurred nearly a year after NSO said it had terminated the contract with the Russian client due to misuse. The journalist, who was covering the Russian government, had their device compromised, allowing attackers to extract sensitive data.
The report indicates that the hacking was carried out by a Russian government-linked group, suggesting that the spyware continued to function despite the contract cancellation. This implies that either the software was not properly deactivated or that a copy of the tool remained in Russian hands.
Impact and Concerns
The incident highlights the challenges in controlling the proliferation of advanced cyber weapons. Pegasus is known for its ability to infiltrate smartphones without user interaction, making it a prized asset for intelligence agencies and law enforcement. The Israeli government has faced criticism for its lax oversight of the cyber arms industry, with human rights groups calling for stricter regulations.
"This case shows that once spyware is out in the wild, it can be used long after official contracts are terminated," said a cybersecurity expert quoted in the report. "Export controls need to be much more robust to prevent such abuses."
Broader Implications
The findings come amid growing global concern over the misuse of commercial spyware. Several countries have been accused of using Pegasus to target journalists, activists, and political opponents. In response, the United States has blacklisted NSO Group, and other nations are considering similar measures.
Russia's use of the tool also underscores the country's increasing reliance on cyber espionage. The Kremlin has denied any involvement, but the evidence suggests a coordinated effort to surveil critical voices.
