US judge rejects spyware developer NSO's attempt to bin Apple's spyware lawsuit
(2024/01/25)
- Reference: 1706139070
- News link: https://www.theregister.co.uk/2024/01/24/us_judge_rejects_pegasus_spyware/
- Source link:
A US court has rejected spyware vendor NSO Group's motion to dismiss a lawsuit filed by Apple that alleges the developer violated computer fraud and other laws by infecting customers' iDevices with its surveillance software.
Apple [1]sued NSO, developer of the notorious Pegasus spyware, back in November 2021 and asked the court to permanently ban NSO from using any Apple software, services, or devices. The lawsuit alleges that company violated the US Computer Fraud and Abuse Act (CFAA), California's Unfair Competition Law, and the terms of use for Apple's own iCloud when its spyware was installed on victims' devices without their knowledge or consent. NSO now must answer Apple's complaint by February 14.
Pegasus infected Apple customers' devices via a zero-click exploit called FORCEDENTRY, according to Cupertino. Once it lands on phones, the spyware allows users to snoop on phone calls, messages, and access the phone's camera and microphone without permission.
[2]
Despite the surveillance-software maker's [3]claims that it only sells to government agencies, and even then, only to investigate terrorism or other serious crimes, the software has repeatedly been used to spy on journalists, activists, political dissidents, diplomats and government officials. This has led to [4]US sanctions against the company and [5]several lawsuits .
[6]
[7]
Last March, NSO asked the court to toss Apple's lawsuit, arguing that Cupertino should be required to sue the developer in Israel, its home jurisdiction. It also claimed that Apple can't sue over CFAA violations because the iGiant itself didn't suffer any damages or loss
The court, in its ruling on Monday, dismissed these arguments, noting that "the anti-hacking purpose of the CFAA fits Apple's allegations to a T, and NSO has not shown otherwise."
[9]
"A 'loss' is 'any reasonable cost to any victim, including the cost of responding to an offense, conducting a damage assessment, and restoring the data, program, system, or information to its condition prior to the offense, and any revenue lost, cost incurred, or other consequential damages incurred because of interruption of service' … That is precisely the loss Apple has alleged here," the judge continued
[11]US Supremes deny Pegasus spyware maker's immunity claim
[12]Apple sues 'amoral 21st century mercenaries' NSO for infecting iPhones with Pegasus spyware
[13]Think tank report labels NSO, Lazarus as 'cyber mercenaries'
[14]Indian politicians say Apple warned them of state-sponsored attacks
When asked about the judge's ruling, an NSO Group spokesperson said the software maker will fight on.
"The motion to dismiss is part of the legal process in this case," the NSO spokesperson told The Register . "The technology in question is critical to law enforcement and intelligence agencies in their efforts to maintain public safety. We are confident that once the arguments are presented, the Court will rule in our favor."
Apple, meanwhile, took the win, and a spokesperson told The Register that this lawsuit is just one of the ways the iGiant is fighting back against spyware vendors.
These include the new [15]Lockdown Mode security feature, the [16]threat notifications it sends to users who may be targets in nation-state attacks, and a [17]$10 million grant to support civil society organizations that research spyware threats and conduct advocacy on the topic through the Ford Foundation. ®
Get our [18]Tech Resources
[1] https://www.theregister.com/2021/11/23/apple_nso_group/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2022/07/27/us_congress_spyware_debate/
[4] https://www.theregister.com/2021/11/03/us_sanctions_spyware/
[5] https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://regmedia.co.uk/2024/01/24/nso_group_motion_to_dismiss_apple_lawsuit.pdf
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://regmedia.co.uk/2024/01/24/rejection_of_nso_motion_to_dismiss.pdf
[11] https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/
[12] https://www.theregister.com/2021/11/23/apple_nso_group/
[13] https://www.theregister.com/2023/12/13/cyber_mercenary_orf_report/
[14] https://www.theregister.com/2023/11/01/india_apple_state_attack_warnings/
[15] https://support.apple.com/en-us/105120
[16] https://www.theregister.com/2023/11/01/india_apple_state_attack_warnings/
[17] https://www.apple.com/newsroom/2022/07/apple-expands-commitment-to-protect-users-from-mercenary-spyware/
[18] https://whitepapers.theregister.com/
Apple [1]sued NSO, developer of the notorious Pegasus spyware, back in November 2021 and asked the court to permanently ban NSO from using any Apple software, services, or devices. The lawsuit alleges that company violated the US Computer Fraud and Abuse Act (CFAA), California's Unfair Competition Law, and the terms of use for Apple's own iCloud when its spyware was installed on victims' devices without their knowledge or consent. NSO now must answer Apple's complaint by February 14.
Pegasus infected Apple customers' devices via a zero-click exploit called FORCEDENTRY, according to Cupertino. Once it lands on phones, the spyware allows users to snoop on phone calls, messages, and access the phone's camera and microphone without permission.
[2]
Despite the surveillance-software maker's [3]claims that it only sells to government agencies, and even then, only to investigate terrorism or other serious crimes, the software has repeatedly been used to spy on journalists, activists, political dissidents, diplomats and government officials. This has led to [4]US sanctions against the company and [5]several lawsuits .
[6]
[7]
Last March, NSO asked the court to toss Apple's lawsuit, arguing that Cupertino should be required to sue the developer in Israel, its home jurisdiction. It also claimed that Apple can't sue over CFAA violations because the iGiant itself didn't suffer any damages or loss
[8]PDF
.The court, in its ruling on Monday, dismissed these arguments, noting that "the anti-hacking purpose of the CFAA fits Apple's allegations to a T, and NSO has not shown otherwise."
[9]
"A 'loss' is 'any reasonable cost to any victim, including the cost of responding to an offense, conducting a damage assessment, and restoring the data, program, system, or information to its condition prior to the offense, and any revenue lost, cost incurred, or other consequential damages incurred because of interruption of service' … That is precisely the loss Apple has alleged here," the judge continued
[10]PDF
.[11]US Supremes deny Pegasus spyware maker's immunity claim
[12]Apple sues 'amoral 21st century mercenaries' NSO for infecting iPhones with Pegasus spyware
[13]Think tank report labels NSO, Lazarus as 'cyber mercenaries'
[14]Indian politicians say Apple warned them of state-sponsored attacks
When asked about the judge's ruling, an NSO Group spokesperson said the software maker will fight on.
"The motion to dismiss is part of the legal process in this case," the NSO spokesperson told The Register . "The technology in question is critical to law enforcement and intelligence agencies in their efforts to maintain public safety. We are confident that once the arguments are presented, the Court will rule in our favor."
Apple, meanwhile, took the win, and a spokesperson told The Register that this lawsuit is just one of the ways the iGiant is fighting back against spyware vendors.
These include the new [15]Lockdown Mode security feature, the [16]threat notifications it sends to users who may be targets in nation-state attacks, and a [17]$10 million grant to support civil society organizations that research spyware threats and conduct advocacy on the topic through the Ford Foundation. ®
Get our [18]Tech Resources
[1] https://www.theregister.com/2021/11/23/apple_nso_group/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2022/07/27/us_congress_spyware_debate/
[4] https://www.theregister.com/2021/11/03/us_sanctions_spyware/
[5] https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://regmedia.co.uk/2024/01/24/nso_group_motion_to_dismiss_apple_lawsuit.pdf
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZbHq-n@9QQDde10zCjykFAAAAEM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://regmedia.co.uk/2024/01/24/rejection_of_nso_motion_to_dismiss.pdf
[11] https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/
[12] https://www.theregister.com/2021/11/23/apple_nso_group/
[13] https://www.theregister.com/2023/12/13/cyber_mercenary_orf_report/
[14] https://www.theregister.com/2023/11/01/india_apple_state_attack_warnings/
[15] https://support.apple.com/en-us/105120
[16] https://www.theregister.com/2023/11/01/india_apple_state_attack_warnings/
[17] https://www.apple.com/newsroom/2022/07/apple-expands-commitment-to-protect-users-from-mercenary-spyware/
[18] https://whitepapers.theregister.com/
Israel.
Anonymous Coward
"arguing that Cupertino should be required to sue the developer in Israel, its home jurisdiction."
In Israel, where they would be slapped with a wet bus ticket I imagine! NSO group is yet another reason why I am hating on that nazi state these days. I guess they took on board the lessons Germany dealt the starting occupiers in WW2 all too well.
Re: Israel.
ldo
Careful, you might suffer the same fate as Jeremy Corbyn.
Cleopatra Holdings
Anonymous Coward
Haaretz U.S. Used Front Company to Buy Israeli NSO’s Spyware, Report Says
The New York Times’ report is the first known publication of the name of “Landmark.” This system is different from Pegasus, which is malware injected onto a target’s cellphone, thus allowing its operator to hack the phone, access all the information stored on it, read encrypted messages and secretly turn on both the camera and microphone.
The report claims that “Landmark” has been used numerous times, mostly against targets in Mexico. The Times also claims that the system was sold to Saudi Arabia and has been used by Crown Prince Mohammed bin Salman against dissidents.
Apple spokesperson speak to The Register
Sorry this is off topic - please skip to the better researched and worded comments.
Nice article and everything but this passage stopped me in my tracks: "Apple, meanwhile, took the win, and a spokesperson told The Register that this lawsuit is just one of the ways the iGiant is fighting back against spyware vendors."
Apple has removed The Register from it's [1]PR blocklist ? A news organisation that doesn't only write glowing reports of Apple kit is allowed to hear from their spokesperson. Is the world maturing? I'm going to miss all those final snarky lines in articles "We approached Apple for a comment and will update the article if we hear back". End of a strange pathetic era?
[1] https://www.theregister.com/2016/09/07/reg_effort_to_attend_iphone_7_launch/