Ex-Meta security staffer accuses Greece of spying on her phone
(2023/03/21)
- Reference: 1679387474
- News link: https://www.theregister.co.uk/2023/03/21/meta_employee_spyware/
- Source link:
Meta's former security policy manager, who split her time between the US and Greece, is reportedly suing the Hellenic national intelligence service for hacking her phone.
After apparently wiretapping her mobile, the Greek spy agency allegedly deployed Predator surveillance software on Artemis Seaford's device while she was working on cybersecurity policy at Meta, a role in which she corresponded with Greek and other European officials, according to [1]The New York Times .
Predator spyware is illegal in Greece, and a government spokesperson denied the accusations.
[2]
"The Greek authorities and security services have at no time acquired or used the Predator surveillance software. To suggest otherwise is wrong," Giannis Oikonomou, the government spokesman, said. "The alleged use of this software by nongovernmental parties is under ongoing judicial investigation."
[3]
[4]
Seaford isn't the first or only person to suggest that the Greek government uses spyware — and specifically Predator — to surveil politicians and journalists.
Greece's cyber-spying problem keeps growing
The country's Prime Minister Kyriakos Mitsotakis has come under fire for allegedly orchestrating [5]mass wiretapping and spying directed at members of his own government, opposition politicians, and journalists.
Additionally, a Google's Threat Analysis Group (TAG), has said that Cytrox, which developed Predator, [6]sold zero-day exploits to government-backed snoops - some in Greece - who used them to deploy the firm's spyware in at least three campaigns in 2021.
2021 is when Seaford's mobile phone was reportedly infected.
[7]
Seaford has filed a lawsuit in Athens against anyone behind the hack in the hopes of forcing an investigation into the spyware's usage.
We won't mention the irony of a Meta employee filing a lawsuit alleging cyber snooping when Meta has faced its own legal battles for secretly (and illegally) [8]tracking iPhone users and " [9]surveillance advertising ," among other not-so-trustworthy endeavors.
Oops, we just did.
Choose your infection: Covid? Or Predator?
The way the hack happened is especially devious: Seaford booked an appointment for a COVID-19 booster shot through the Greek government's vaccination platform, received an automated SMS with appointment details, then received another SMS asking her to confirm her appointment by clicking a link.
That last link was allegedly a malicious URL that, after Seaford clicked it, led to her device being infected with Predator. "The details for the vaccination appointment in the infected text message were correct, indicating that someone had reviewed the authentic earlier confirmation and drafted the infected message accordingly," according to the Times report.
[10]
According to the paper, Seaford worked at Meta between 2020 and 2022, abd saw her name on a leaked list of spyware targets in the Greek news media last November and took her phone for analysis at Citizen Lab.
[11]Predator spyware sold with Chrome, Android zero-day exploits to monitor targets
[12]European officials reportedly targeted by NSO spyware
[13]Meta accused of breaking the law by secretly tracking iPhone users
[14]NSO claims 'more than 5' EU states use Pegasus spyware
Citizen Lab determined her phone had been infected by Predator spyware in September 2021 for at least two months. "This does not preclude the possibility of other infections, or of an infection period extending beyond November 16 2021," the forensic report by Citizen Lab said.
Additionally, the Times reported two people "with direct knowledge of the case" told its reporters that Seaford's phone had been wiretapped by the Greek spy agency from August 2021 well into 2022.
Seaford is the fourth known person, and the first American citizen, to file a lawsuit in Greece over the use of the snooping software. The other three include investigative reporter Thanasis Koukakis and two [15]opposition politicians .
Meanwhile, the European Union has launched its own [16]investigation into spyware including Predator and the [17]notorious Pegasus malware . Lawmakers in the EU and [18]US have also cracked down on commercial surveillance software and the software firms that sell it. ®
Get our [19]Tech Resources
[1] https://www.nytimes.com/2023/03/20/world/europe/greece-spyware-hacking-meta.html
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theguardian.com/world/2023/jan/25/opposition-file-no-confidence-motion-greek-watergate-scandal-prime-minister-kyriakos-mitsotakis-wiretaps
[6] https://www.theregister.com/2022/05/24/predator_spyware_zero_days/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2022/09/23/meta_app_tracking/
[9] https://www.theregister.com/2022/11/23/meta_surveillance_advertising_high_court/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2022/05/24/predator_spyware_zero_days/
[12] https://www.theregister.com/2022/04/11/nso_spyware_eu/
[13] https://www.theregister.com/2022/09/23/meta_app_tracking/
[14] https://www.theregister.com/2022/06/24/nso_customers_eu_pegasus/
[15] https://www.nytimes.com/2022/07/27/world/europe/eu-spyware-predator-pegasus.html
[16] https://www.theregister.com/2022/06/24/nso_customers_eu_pegasus/
[17] https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/
[18] https://www.theregister.com/2022/07/27/us_congress_spyware_debate/
[19] https://whitepapers.theregister.com/
After apparently wiretapping her mobile, the Greek spy agency allegedly deployed Predator surveillance software on Artemis Seaford's device while she was working on cybersecurity policy at Meta, a role in which she corresponded with Greek and other European officials, according to [1]The New York Times .
Predator spyware is illegal in Greece, and a government spokesperson denied the accusations.
[2]
"The Greek authorities and security services have at no time acquired or used the Predator surveillance software. To suggest otherwise is wrong," Giannis Oikonomou, the government spokesman, said. "The alleged use of this software by nongovernmental parties is under ongoing judicial investigation."
[3]
[4]
Seaford isn't the first or only person to suggest that the Greek government uses spyware — and specifically Predator — to surveil politicians and journalists.
Greece's cyber-spying problem keeps growing
The country's Prime Minister Kyriakos Mitsotakis has come under fire for allegedly orchestrating [5]mass wiretapping and spying directed at members of his own government, opposition politicians, and journalists.
Additionally, a Google's Threat Analysis Group (TAG), has said that Cytrox, which developed Predator, [6]sold zero-day exploits to government-backed snoops - some in Greece - who used them to deploy the firm's spyware in at least three campaigns in 2021.
2021 is when Seaford's mobile phone was reportedly infected.
[7]
Seaford has filed a lawsuit in Athens against anyone behind the hack in the hopes of forcing an investigation into the spyware's usage.
We won't mention the irony of a Meta employee filing a lawsuit alleging cyber snooping when Meta has faced its own legal battles for secretly (and illegally) [8]tracking iPhone users and " [9]surveillance advertising ," among other not-so-trustworthy endeavors.
Oops, we just did.
Choose your infection: Covid? Or Predator?
The way the hack happened is especially devious: Seaford booked an appointment for a COVID-19 booster shot through the Greek government's vaccination platform, received an automated SMS with appointment details, then received another SMS asking her to confirm her appointment by clicking a link.
That last link was allegedly a malicious URL that, after Seaford clicked it, led to her device being infected with Predator. "The details for the vaccination appointment in the infected text message were correct, indicating that someone had reviewed the authentic earlier confirmation and drafted the infected message accordingly," according to the Times report.
[10]
According to the paper, Seaford worked at Meta between 2020 and 2022, abd saw her name on a leaked list of spyware targets in the Greek news media last November and took her phone for analysis at Citizen Lab.
[11]Predator spyware sold with Chrome, Android zero-day exploits to monitor targets
[12]European officials reportedly targeted by NSO spyware
[13]Meta accused of breaking the law by secretly tracking iPhone users
[14]NSO claims 'more than 5' EU states use Pegasus spyware
Citizen Lab determined her phone had been infected by Predator spyware in September 2021 for at least two months. "This does not preclude the possibility of other infections, or of an infection period extending beyond November 16 2021," the forensic report by Citizen Lab said.
Additionally, the Times reported two people "with direct knowledge of the case" told its reporters that Seaford's phone had been wiretapped by the Greek spy agency from August 2021 well into 2022.
Seaford is the fourth known person, and the first American citizen, to file a lawsuit in Greece over the use of the snooping software. The other three include investigative reporter Thanasis Koukakis and two [15]opposition politicians .
Meanwhile, the European Union has launched its own [16]investigation into spyware including Predator and the [17]notorious Pegasus malware . Lawmakers in the EU and [18]US have also cracked down on commercial surveillance software and the software firms that sell it. ®
Get our [19]Tech Resources
[1] https://www.nytimes.com/2023/03/20/world/europe/greece-spyware-hacking-meta.html
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theguardian.com/world/2023/jan/25/opposition-file-no-confidence-motion-greek-watergate-scandal-prime-minister-kyriakos-mitsotakis-wiretaps
[6] https://www.theregister.com/2022/05/24/predator_spyware_zero_days/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2022/09/23/meta_app_tracking/
[9] https://www.theregister.com/2022/11/23/meta_surveillance_advertising_high_court/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZBmOUPxCtI@SQX@I1enBQAAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2022/05/24/predator_spyware_zero_days/
[12] https://www.theregister.com/2022/04/11/nso_spyware_eu/
[13] https://www.theregister.com/2022/09/23/meta_app_tracking/
[14] https://www.theregister.com/2022/06/24/nso_customers_eu_pegasus/
[15] https://www.nytimes.com/2022/07/27/world/europe/eu-spyware-predator-pegasus.html
[16] https://www.theregister.com/2022/06/24/nso_customers_eu_pegasus/
[17] https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/
[18] https://www.theregister.com/2022/07/27/us_congress_spyware_debate/
[19] https://whitepapers.theregister.com/
Predator spyware is illegal in Greece, and a government spokesperson denied the accusations.
Anonymous Coward
A good summary :)
PMSL
Yorick Hunt
It's like Jehovah's Witnesses not liking Halloween because they don't want random strangers knocking on their doors.
So too, an employee of one of the (if not the ) biggest usurpers of private data in the world decided to go finger-pointing.
Shouldn't you be bowing your head in shame if you're a "security staffer" who allowed themselves to get pwned (if the allegation is even true)?
infected with covid
Zolko
Ha, that a covidiot's phone gets infected with malware for taking the jab is Schadenfreude at its pinnacle.
Beware of *Geeks* bearing GIFs.