top | item 32222304

The EU has quietly provided Morocco with powerful phone hacking systems [French]

48 points| c80e74f077 | 3 years ago |disclose.ngo

22 comments

order

c80e74f077|3 years ago

DeepL Translation: According to documents obtained by Disclose and Der Spiegel from European institutions, the Swedish company MSAB has provided the Moroccan police with a software called XRY capable of unlocking all types of smartphones to extract data from calls, contacts, location, but also messages sent and received by SMS, WhatsApp and Signal. As for Oxygen forensic, domiciled in the United States, it has delivered a data extraction and analysis system called "Detective". What makes it special? Bypassing screen locks on mobile devices in order to extract information stored in the cloud (Google, Microsoft or Apple) or secure applications on any phone or computer. The notable difference with Pegasus software is that both software require physical access to the mobile device to be hacked, and do not allow remote monitoring.

jaclaz|3 years ago

Both XRY and Oxigen are AFAIK "common" and "established" forensics tools, unless the versions provided to Morocco are "special" there is nothing particularly "alarming" or "new/revolutionary", let alone "secret" about them,

https://www.msab.com/

https://www.oxygen-forensic.com/en/

Some products may be reserved to Law Enforcement or Licensed investigators, but I believe that's all.

BiteCode_dev|3 years ago

Which is fair play.

I fully expect authorities from any countries to try to get evidences from physical access to electronic devices in the case of criminal investigation. Just like they can go into ones house and open safes with a torch if a judge allows it.

The problem is mass surveillance, not getting data about someone under arrest.

Of course, I unfortunatly also fully expect them to abuse that and use it outside of criminal investigations, without the knowledge of said person.

curiousgal|3 years ago

So does that mean that all phone manufacturers are essentially selling snake oil when it comes to device security?

peoplefromibiza|3 years ago

Bit of clickbait title, from the article it's not clear at all what the news is, Morocco already has Pegasus (from Israel) that works remotely, these new software are much less powerful and require physical access to the device, but once you already have physical access, it's game over.

Of course, even if the article make it sound like a scandal, exchange of anti-privacy software for catching human traffickers [1] is not announced in a worldwide press release, it would defeat its purpose

[1] from the article

Objective of this technology transfer financed from the budget of the EU's "border management program for the Maghreb region": to fight against irregular immigration and human trafficking at the gates of the EU.

arminsergiony|3 years ago

The primary distinction between Pegasus software and other software is that in order to hack a mobile device, the hacker must have direct, physical access to the device. Pegasus software does not provide remote surveillance.

rprime|3 years ago

I am reading in the airport after leaving Morocco. A couple of days ago I received a weird spam SMS message (coming from an iCloud account) that i’ve never seen before. I didn’t open the messages as I know about Pegasus and my senses started to tingle.

I guess it’s time to reset my phone.