100: NSO

The episode begins with the host celebrating his 100th episode of Dark Net Diaries, expressing gratitude to listeners. It introduces the focus of the episode, which is a deep dive into cyber surveillance, hacking, and espionage activities tied to government agencies, particularly through the example of an Israeli spyware firm, NSO Group. The host discusses the importance of understanding both the technical and ethical issues surrounding spyware like Pegasus, which can be used for both lawful interception and abuse.

The episode explores how government agencies, including the FBI, allegedly use sophisticated malware like Magic Lantern to surveil targets legally, raising questions about transparency and detection. It discusses the debate about whether antivirus companies should notify users about law enforcement surveillance tools, considering their ethically complex use cases. The segment emphasizes that governments may legalize such spying through warrants but still face scrutiny over transparency and accountability.

Research by Citizen Lab at the University of Toronto is highlighted, particularly their efforts to track digital threats against civil society, journalists, and activists. The episode narrates the case of Ahmed Mansour, a UAE human rights activist, whose texts led to the discovery of NSO’s Pegasus spyware infrastructure. The research involved analyzing suspicious domains, reverse DNS lookups, and even developing technical methods to capture and dissect malware payloads, revealing the sophistication of Pegasus and its chain of exploits targeting iPhones.

A detailed technical explanation describes how Pegasus exploits vulnerabilities in WebKit (used by Safari), gains jailbreak access to iPhones, and uses zero-day exploits to install spyware capable of turning on microphones, cameras, and tracking location without the user’s knowledge. The episode emphasizes the complexity and cost of developing such exploits, their stealthy nature, and how they are used to surveil high-value targets.

Citizen Lab’s investigation uncovered widespread misuse of Pegasus in Mexico, targeting journalists, activists, lawyers, and relatives of victims of violence. Notable cases include the targeting of journalists like Javier Valdez, who was murdered, and the use of spyware to spy on victims’ families and law firms, often with political or criminal motives. The episode underscores that many of these abuses are beyond the scope of law enforcement and reflect malicious escalation.

The episode critically examines NSO’s claims of responsible conduct, noting their inability to account for misuse or specify their client list publicly. It discusses allegations that NSO sold Pegasus to oppressive regimes like Saudi Arabia, involved in Khashoggi’s murder, and the possible abuse in countries with poor human rights records. The company’s lack of accountability, denial of misuse, and secretive nature are highlighted as major concerns.

The episode discusses NSO’s legal battles, including a high-profile lawsuit from WhatsApp, which claimed Pegasus was used to spy on users without consent. It reveals the possibility that NSO operates or owns some of the infrastructure used for exploitation, contradicting their claims of only selling software to lawful customers. The discussion criticizes the lack of regulation, ethical oversight, and the risk of spyware being used for political repression and violence, including the assassination of journalist Jamal Khashoggi.

The episode explores how NSO’s spyware has allegedly been used by countries like Rwanda, India, and Mexico against activists and dissidents, raising concern about human rights abuses. It highlights the scandal of leaked target lists and reports of NSO servers being hacked, indicating vulnerabilities or possible internal misuse. The narrative questions the integrity and accountability of NSO, contrasting their claims of safety with evidence of widespread misuse and the potential internal and external pressures to sell to oppressive regimes.