100: NSO

Episode Summary

Executive Summary: In this 100th episode of Darknet Diaries, host Jack Resider explores the NSO Group's Pegasus spyware, detailing its discovery by Citizen Lab researcher John Scott Railton, its use by governments to target journalists and activists, and the ethical debates surrounding government hacking. The episode covers the malware's technical sophistication, documented abuses in Mexico and Saudi Arabia, NSO's denials, and ongoing legal battles, highlighting the tension between surveillance for security and its potential for human rights violations.

Main Topics: Discovery of Pegasus Spyware (Priority: 5/5): Citizen Lab, led by John Scott Railton, discovered Pegasus after Ahmed Mansoor, a UAE human rights activist, received suspicious text messages. By clicking a link on a test iPhone, they observed a remote jailbreak using three zero-day exploits, marking the first known instance of such sophisticated mobile spyware. NSO Group's Business Model and Denials (Priority: 5/5): NSO Group, an Israeli company, sells Pegasus to governments for lawful intercept, claiming it saves lives by preventing crime and terror. They deny responsibility for misuse, stating they vet customers and have only three cases of abuse, despite evidence of widespread targeting of civil society. Abuse of Pegasus in Mexico (Priority: 4/5): In Mexico, Pegasus was used to target journalists, human rights activists, and even a child, often with emotionally manipulative text messages. Cases include spying on soda tax advocates and the widow of a murdered journalist, indicating use beyond crime-fighting for political or corporate interests. Role in Jamal Khashoggi's Murder (Priority: 4/5): Pegasus was allegedly used to spy on Khashoggi and his associates before his assassination. NSO denies involvement, but evidence shows his fiancée's phone was infected post-murder, and Citizen Lab linked the targeting to Saudi Arabia, raising questions about NSO's accountability. Legal and Ethical Challenges (Priority: 4/5): WhatsApp sued NSO for a zero-click exploit, with tech giants supporting the case. NSO faces scrutiny over its transparency report and alleged hacking of its servers, while the Pegasus Project leaked 50,000 potential targets, highlighting the lack of regulation and oversight. Spying on Citizen Lab (Priority: 3/5): John Scott Railton and colleagues were targeted by Black Cube, a private spy agency, likely hired by NSO to gather information on legal cases against them. This suggests NSO may be directly involved in unethical activities beyond selling spyware.

Key Arguments: NSO claims Pegasus saves tens of thousands of lives by preventing terror and crime, but critics argue this narrative masks widespread abuse against journalists and activists. The Mexican government used Pegasus for purposes beyond crime-fighting, such as targeting soda tax advocates and the family of a murdered journalist, indicating misuse for political and corporate gain. NSO's denials of involvement in Khashoggi's murder are contradicted by evidence of Pegasus targeting his fiancée and associates, undermining their credibility. The zero-click WhatsApp exploit shows NSO's continuous development of new attack vectors, making it impossible for individuals to protect themselves. NSO's transparency report is criticized as PR fluff, lacking specific details on customer abuses and failing to name countries cut off for misuse. The targeting of Citizen Lab researchers by Black Cube suggests NSO may be directly involved in unethical surveillance, not just selling tools.

Data Points: Number of zero-day exploits used in initial Pegasus attack: 3 - The exploit chain used three zero-day vulnerabilities to jailbreak an iPhone. Number of Pegasus abuse cases in Mexico: 25 - Citizen Lab discovered 25 cases of Pegasus misuse in Mexico, contradicting NSO's claim of only three total cases. Number of NSO customers: 60 - NSO's transparency report states they have 60 customers in 40 countries. Number of potential targets in leaked list: 50,000 - The Pegasus Project leaked a list of 50,000 phone numbers considered potential targets for Pegasus. Percentage of misuse claimed by NSO: 0.5% - NSO claims only half a percent of targets are misused, but evidence suggests much higher rates. Number of countries NSO refuses to do business with: 55 - NSO's transparency report lists 55 countries they avoid due to human rights concerns.

Pivotal Quotes: "We had just observed a remote jailbreak on this iPhone. So it was a big deal because it was the first of its kind that we had certainly seen." — John Scott Railton: Describing the moment Citizen Lab discovered Pegasus spyware after clicking a link on a test iPhone. "I only say that we are selling Pegasus in order to prevent crime and terror." — Shalev Hulio: NSO co-founder defending the company's mission during a 60 Minutes interview. "What really concerns me is the idea that you can just sort of say, you know, here's a technology that saves lives. Well, no, what saves lives is police and security forces doing their jobs." — John Scott Railton: Critiquing NSO's narrative that Pegasus saves lives, emphasizing that technology alone is not a solution.

Implications: The episode underscores the urgent need for international regulation of commercial spyware to prevent human rights abuses. It highlights the vulnerability of journalists and activists to state-sponsored surveillance, and the ethical dilemmas for tech companies and governments in balancing security with privacy. Listeners are reminded that even fully patched devices can be compromised, and that accountability for spyware makers is critical.