Bibliography for Chasing Shadows

The White House

  1. US Department of Commerce, “Commerce Adds NSO Group and Other Foreign Companies to Entity List for Malicious Cyber Activities,” press release, November 9, 2021, https://www.commerce.gov/news/press-releases/2021/11/commerce-adds-nso-group-and-other-foreign-companies-entity-list (archive: perma.cc/PBD5-JDGB).

  2. Adam Schiff, “Wyden, Schiff, Meeks and Maloney Lead House and Senate Democrats in Calling for Magnitsky Act Sanctions against Companies That Enable Human Rights Abuses,” press release, December 15, 2021, https://schiff.house.gov/news/press-releases/wyden-schiff-meeks-and-maloney-lead-house-and-senate-democrats-in-calling-for-magnitsky-act-sanctions-against-companies-that-enable-human-rights-abuses (archive: perma.cc/4SWH-VZNJ).

  3. US House of Representatives Permanent Select Committee on Intelligence, “Full Committee Hearing—Combatting the Threats to U.S. National Security from the Proliferation of Foreign Commercial Spyware,” accessed May 29, 2024, https://docs.house.gov/Committee/Calendar/ByEvent.aspx?EventID=115048 (archive: perma.cc/L8GC-H4G4).

  4. Carine Kanimba, “Statement of Carine Kanimba,” US House of Representatives Permanent Select Committee on Intelligence, July 27, 2022, https://docs.house.gov/meetings/IG/IG00/20220727/115048/HHRG-117-IG00-Wstate-KanimbaC-20220727.pdf (archive: perma.cc/EV7F-HMSB).

  5. Mehul Srivastava and Kaye Wiggins, “Israel’s NSO Bets Its Future on Netanyahu’s Comeback,” Financial Times, December 6, 2022, https://www.ft.com/content/88379bcd-2d99-427f-86e1-bcc841cb609f (archive: perma.cc/B22J-SKRP).

Chapter 1: A Near Perfect Hack

  1. Simon Kemp, “Digital 2023 October Global Statshot Report,” DataReportal, October 19, 2023, www.datareportal.com/reports/digital-2023-october-global-statshot (archive: perma.cc/5F3V-QUTX).

  2. Ronen Bergman and Mark Mazzetti, “The Battle for the World’s Most Powerful Cyberweapon,” New York Times, January 28, 2022, www.nytimes.com/2022/01/28/magazine/nso-group-israel-spyware.html.

  3. Ronen Bergman and Mark Mazzetti, “Israeli Companies Aided Saudi Spying Despite Khashoggi Killing,” New York Times, July 17, 2021, www.nytimes.com/2021/07/17/world/middleeast/israel-saudi-khashoggi-hacking-nso.html; Drew Harwell, “Dubai Ruler Used Pegasus Spyware to Hack Princess’s Phone, U.K. Court Rules,” Washington Post, October 6, 2021, www.washingtonpost.com/technology/2021/10/06/pegasus-dubai-princess-haya-court-ruling/ (archive: perma.cc/6SZN-UCSC); Natalie Kitroeff and Ronen Bergman, “How Mexico Became the Biggest User of the World’s Most Notorious Spy Tool,” New York Times, April 18, 2023, www.nytimes.com/2023/04/18/world/americas/pegasus-spyware-mexico.html.

  4. Raphael Satter, “Undercover Spy Exposed in NYC Was 1 of Many,” Associated Press, February 11, 2019, www.apnews.com/general-news-9bdbbfe0c8a2407aac14a1e995659de4 (archive: perma.cc/85XD-2LLA).

  5. Ronen Bergman and Patrick Kingsley, “Despite Abuses of NSO Spyware, Israel Will Lobby U.S. to Defend It,” New York Times, November 8, 2021, www.nytimes.com/2021/11/08/world/middleeast/nso-israel-palestinians-spyware.html.

  6. Alex Kane, “How Israel Became a Hub for Surveillance Technology,” Intercept, October 17, 2016, www.theintercept.com/2016/10/17/how-israel-became-a-hub-for-surveillance-technology/ (archive: perma.cc/7C4M-YEAG).

  7. Patrick Howell O’Neill, “Israeli Hacking Company NSO Group Is on Sale for More Than $1 Billion,” CyberScoop, June 12, 2017, www.cyberscoop.com/nso-group-for-sale-1-billion-pegasus-malware/ (archive: perma.cc/4G8H-TB29); Yasmin Yablonko, “Novalpina Capital and Founders Buy NSO at $1b Co Value,” Globes, February 14, 2019, en.globes.co.il/en/article-novalpina-capital-and-founders-buy-nso-for-1b-1001273312 (archive: perma.cc/3RJU-5E9C).

  8. Jeremy Herb, Katelyn Polantz, Evan Perez, and Marshall Cohen, “Flynn Pleads Guilty to Lying to FBI, Is Cooperating with Mueller,” CNN, December 1, 2017, www.cnn.com/2017/12/01/politics/michael-flynn-charged/index.html (archive: perma.cc/ZTP8-AP95); “Michael Flynn: Trump Pardons Ex–National Security Adviser,” BBC, November 25, 2020, www.bbc.com/news/world-us-canada-55080923 (archive: perma.cc/YQ36-JPX9).

  9. Ryan Johnston, “How Michael Flynn Helped Cybersecurity Firms before His White House Stint,” CyberScoop, June 19, 2017, cyberscoop.com/flynn-dabbled-private-sector-government-appointment-form-shows/ (archive: perma.cc/7VVQ-PC9Y).

  10. Adam Entous, Greg Miller, Kevin Sieff, and Karen DeYoung, “Blackwater Founder Held Secret Seychelles Meeting to Establish Trump-Putin Back Channel,” Washington Post, April 3, 2017, www.washingtonpost.com/world/national-security/blackwater-founder-held-secret-seychelles-meeting-to-establish-trump-putin-back-channel/2017/04/03/95908a08-1648-11e7-ada0-1489b735b3a3_story.html; “Mueller Report Findings: Mueller Rejects Argument That Trump Is Shielded from Obstruction Laws,” Washington Post, April 18, 2019, https://www.washingtonpost.com/politics/mueller-report-russia-investigation-findings/2019/04/18/b07f4310-56f9-11e9-814f-e2f46684196e_story.html; Robert S. Mueller III, Report on the Investigation into Russian Interference in the 2016 Presidential Election, vol. 1 (Washington, DC: US Department of Justice, March 2019), https://www.justice.gov/archives/sco/file/1373816/dl; Erin Banco, “Mueller Exposes Erik Prince’s Lies about His Rendezvous with a Top Russian,” Daily Beast, April 18, 2019, https://www.thedailybeast.com/mueller-exposes-erik-princes-lies-about-his-seychelles-rendezvous-with-top-russian-kirill-dmitriev (archive: perma.cc/2FBC-BJUS).

  11. Wendy Siegelman, “Eitanium Ltd Chart: Erik Prince and Directors and Their Network of Cyber Surveillance Related Companies,” Medium, March 21, 2021, wsiegelman.medium.com/eitanium-ltd-chart-erik-prince-and-directors-and-their-network-of-cyber-surveillance-and-related-16e6b28c0379 (archive: perma.cc/6Z2G-A57W).

  12. Amnesty International, “Pegasus Project: Rwandan Authorities Chose Thousands of Activists, Journalists and Politicians to Target with NSO Spyware,” press release, July 19, 2021, www.amnesty.org/en/latest/press-release/2021/07/rwandan-authorities-chose-thousands-of-activists-journalists-and-politicians-to-target-with-nso-spyware/ (archive: perma.cc/9RAF-K2YB); Julian E. Barnes and David E. Sanger, “Saudi Crown Prince Is Held Responsible for Khashoggi Killing in U.S. Report,” New York Times, February 26, 2021, www.nytimes.com/2021/02/26/us/politics/jamal-khashoggi-killing-cia-report.html; Bill Marczak and John Scott-Railton, The Million Dollar Dissident: NSO Group’s iPhone Zero-Days Used against a UAE Human Rights Defender, Research Report No. 78, Citizen Lab, University of Toronto, August 24, 2016, www.citizenlab.ca/2016/08/million-dollar-dissident-iphone-zero-day-nso-group-uae/ (archive: perma.cc/8CMB-RA2P).

  13. Emma Graham-Harrison, “Missing Emirati Princess ‘Planned Escape for Seven Years,’” Guardian, December 4, 2018, www.theguardian.com/world/2018/dec/04/missing-emirati-princess-latifa-al-maktoum-had-planned-escape-for-seven-years (archive: perma.cc/3NKE-58LR).

  14. Shane Huntley, “Buying Spying: How the Commercial Surveillance Industry Works and What Can Be Done about It,” Google Threat Analysis Group, February 6, 2024, https://blog.google/threat-analysis-group/commercial-surveillance-vendors-google-tag-report/ (archive: perma.cc/53NF-Q4UT).

  15. “FSB Team of Chemical Weapon Experts Implicated in Alexey Navalny Novichok Poisoning,” Bellingcat, December 14, 2020, www.bellingcat.com/news/uk-and-europe/2020/12/14/fsb-team-of-chemical-weapon-experts-implicated-in-alexey-navalny-novichok-poisoning/ (archive: perma.cc/FX79-PYLC).

  16. Andy Greenberg, “Signal Is Finally Bringing Its Secure Messaging to the Masses,”ired, February 14, 2020, www.wired.com/story/signal-encrypted-messaging-features-mainstream/ (archive: perma.cc/4ZQU-5KK3).

  17. Bill Marczak, John Scott-Railton, Sarah McKune, Bahr Abdul Razzak, and Ron Deibert, Hide and Seek: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries, Research Report No. 113, Citizen Lab, University of Toronto, September 18, 2018, www.citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/ (archive: perma.cc/TJ7M-8PMP); “Azerbaijan Suspected of Spying on Reporters, Activists by Using Software to Access Phones,” Radio Free Europe/Radio Liberty, July 18, 2021, www.rferl.org/a/azerbaijan-pegasus-spying-nso/31365076.html (archive: perma.cc/T9NM-JZQP).

  18. Raeesa Pather, “The Botched Investigation into Rwanda’s Murdered Spy Chief,” Mail & Guardian, January 25, 2019, www.mg.co.za/article/2019-01-25-00-murdered-spy-boss-probe-botched/ (archive: perma.cc/7HSD-GBGL).

  19. John Scott-Railton, Siena Anstis, Sharly Chan, Bill Marczak, and Ron Deibert, Nothing Sacred: Religious and Secular Voices for Reform in Togo Targeted with NSO Spyware, Research Report No. 129, Citizen Lab, University of Toronto, August 3, 2020, www.citizenlab.ca/2020/08/nothing-sacred-nso-sypware-in-togo/ (archive: perma.cc/FTB4-E6LF).

  20. John Scott-Railton, Elies Campo, Bill Marczak, Bahr Abdul Razzak, Siena Anstis, Gözde Böcü, Salvatore Solimano, and Ron Deibert. CatalanGate: Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru, Research Report No. 155, Citizen Lab, University of Toronto, April 18, 2022, www.citizenlab.ca2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalansusing-pegasus-candiru/.

  21. “Read the WhatsApp Complaint against NSO Group,” Washington Post, October 29, 2019, www.washingtonpost.com/context/read-the-whatsapp-complaint-against-nso-group/abc0fb24-8090-447f-8493-1e05b2fc1156/ (archive: perma.cc/E3CD-VWCS).

  22. Will Cathcart, “Why WhatsApp Is Pushing Back on NSO Group Hacking,” Washington Post, October 29, 2019, www.washingtonpost.com/opinions/2019/10/29/why-whatsapp-is-pushing-back-nso-group-hacking/ (archive: perma.cc/PQ5F-7GRK).

CHAPTER 2: HUNTING A STEALTH FALCON

  1. “UAE: Investigate Threats against ‘UAE 5,’” Human Rights Watch, November 25, 2011, www.hrw.org/news/2011/11/25/uae-investigate-threats-against-uae-5 (archive: perma.cc/P2UY-2T7Z).

  2. Juhie Bhatia, “Journalist’s Tweets Give Voice to Libya Uprisings,” Women’s eNews, March 22, 2011, www.womensenews.org/2011/03/journalists-tweets-give-voice-libya-uprisings/ (archive: perma.cc/ED7V-FV56).

  3. Marc Owen Jones, “Social Media Fuelled the Arab Spring, then Helped Dictators Quash It,” New Arab, January 12, 2021, www.newarab.com/opinion/tech-fuelled-arab-spring-then-helped-quash-it (archive: perma.cc/6GRB-4SF5).

  4. Cora Currier and Morgan Marquis-Boire, “Leaked Files: German Spy Company Helped Bahrain Hack Arab Spring Protesters,” Intercept, August 7, 2014, www.theintercept.com/2014/08/07/leaked-files-german-spy-company-helped-bahrain-track-arab-spring-protesters/ (archive: perma.cc/LJ79-TXFP).

  5. Marwa Fatafta, “From Free Space to a Tool of Oppression: What Happened to the Internet since the Arab Spring?,” Tahrir Institute for Middle East Policy, December 17, 2020, www.timep.org/2020/12/17/from-free-space-to-a-tool-of-oppression-what-happened-to-the-internet-since-the-arab-spring/ (archive: perma.cc/55RN-DJF6).

  6. “How BAE Sold Cyber-Surveillance Tools to Arab States,” BBC, June 14, 2017, www.bc.com/news/world-middle-east-40276568 (archive: perma.cc/3AAR-6BZ5); Ronen Bergman and Mark Mazzetti, “The Battle for the World’s Most Powerful Cyberweapon,” New York Times, January 28, 2022, www.nytimes.com/2022/01/28/magazine/nso-group-israel-spyware.html.

  7. Ian Black and Sarah Carr, “Egyptians Prise Open Secrets of Hosni Mubarak’s State Security Headquarters,” Guardian, March 7, 2011, www.theguardian.com/world/2011/mar/07/egypt-state-security-mubarak-cairo (archive: perma.cc/EQ6L-RZ8Q).

  8. Karen McVeigh, “British Firm Offered Spying Software to Egyptian Regime— Documents,” Guardian, April 28, 2011, www.theguardian.com/technology/2011/apr/28/egypt-spying-software-gamma-finfisher (archive: perma.cc/8JCF-4TKY).

  9. Ramy Raoof, “Egypt: How Companies Help the Government Spy on Activists,” Global Voices Advox, May 7, 2011, advox.globalvoices.org/2011/05/07/egypt-how-companies-help-the-government-spy-on-activists/ (archive: perma.cc/6ZL9-FNMD); David Pegg, “Bahraini Arab Spring Dissidents Sue UK Spyware Maker,” Guardian, October 11, 2018, www.theguardiancom/world/2018/oct/11/bahraini-arab-spring-dissidents-sue-uk-spyware-maker.

  10. “The Spy Files,” WikiLeaks, December 1, 2011, www.wikileaks.org/spyfiles/listreleasedate/2011-12-08.html.

  11. Vernon Silver, “Cyber Attacks on Activists Traced to FinFisher Spyware of Gamma,”loomberg, July 25, 2012, www.bloomberg.com/news/articles/2012-07-25/cyberattacks-on-activists-traced-to-finfisher-spyware-of-gamma (archive: perma.cc/7CWL-QTJJ).

  12. Morgan Marquis-Boire and Bill Marczak, From Bahrain with Love: FinFisher’s Spy Kit Exposed?, Research Report No. 9, Citizen Lab, University of Toronto, July 25, 2012, www.citizenlab.ca/2012/07/from-bahrain-with-love-finfishers-spy-kit-exposed/ (archive: perma.cc/968C-9Y6M).

  13. Morgan Marquis-Boire, Backdoors Are Forever: Hacking Team and the Targeting of Dissent?, Research Report No. 12, Citizen Lab, University of Toronto, October 10, 2012, www.citizenlab.ca/2012/10/backdoors-are-forever-hacking-team-and-the-targeting-of-dissent/ (archive: perma.cc/9HHK-7CM7).

  14. Tu Thanh Ha, “Middle Eastern Activists Being Cyber-Spied On: U of T Report,”lobe and Mail, October 10, 2012, www.theglobeandmail.com/news/world/middle-eastern-activists-being-cyber-spied-on-u-of-t-report/article4601322/ (archive: perma.cc/FU77-495B).

  15. Nicole Perlroth, “Ahead of Spyware Conference, More Evidence of Abuse,” New York Times, October 10, 2012, archive.nytimes.com/bits.blogs.nytimes.com/201210/10/ahead-of-spyware-conference-more-evidence-of-abuse/.

  16. Bill Marczak and John Scott-Railton, Keep Calm and (Don’t) Enable Macros: A New Threat Actor Targets UAE Dissidents, Research Report No. 75, Citizen Lab, University of Toronto, May 29, 2016, www.citizenlab.ca/2016/05/stealth-falcon/ (archive: perma.cc/JFS3-P7DD).

  17. Bryan Burrough, “How a Grad Student Found Spyware That Could Control Anybody’s iPhone from Anywhere in the World,” Vanity Fair, November 28, 2016, www.vanityfair.com/news/2016/11/how-bill-marczak-spyware-can-control-the-iphone (archive: perma.cc/RX7D-5JN6).

  18. Bill Marczak and John Scott-Railton, The Million Dollar Dissident: NSO Group’s iPhone Zero-Days Used against a UAE Human Rights Defender, Research Report No. 78, Citizen Lab, University of Toronto, August 24, 2016, www.citizenlab.ca/2016/08/million-dollar-dissident-iphone-zero-day-nso-group-uae/ (archive: perma.cc/8CMB-RA2P).

  19. Nicole Perlroth, “iPhone Users Urged to Update Software after Security Flaws Are Found,” New York Times, August 25, 2016, www.nytimes.com/2016/08/26technology/apple-software-vulnerability-ios-patch.html.

CHAPTER 3: ALOHA FROM HAWAII

  1. PowerfulJRE, “Joe Rogan Experience #1536—Edward Snowden,” September 15, 2020, video, 2:28:39, www.youtube.com/watch?v=_Rl82OQDoOc (archive: perma.cc/P7YG-7R3M ); Citizen Lab (@citizenlab), “Have you heard about us on @joerogan thx to @Snowden? youtube/_Rl82OQDoOc Check out Security Planner! Gives hints on how to make your online experience more secure: securityplanner.org (archive: perma.cc/89UF-TA4W). Also see our friends @ EFF’s surveillance self-defence guide t.co/eYe7EZFpKC,” X, September 15, 2020, https://x.com/citizenlab/status/1306013241483685893 (archive: perma.cc/4PET-V7T7).

  2. Christopher Bing and Joel Schectman, “Inside the UAE’s Secret Hacking Team of American Mercenaries,” Reuters, January 30, 2019, www.reuters.com/investigatesspecial-report/usa-spying-raven/.

  3. Jill Ann Crystal and J.E. Peterson, “United Arab Emirates,” Encyclopedia Britannica, February 4, 2024, www.britannica.com/place/United-Arab-Emirates (archive: perma.cc/QQM4-DAG8).

  4. Maggie Michael and Michael Hudson, “Pandora Papers Reveal Emirati Royal Families’ Role in Secret Money Flows,” International Consortium of Investiga- tive Journalists, November 16, 2021, www.icij.org/investigations/pandora-papers/pandora-papers-reveal-emirati-royal-families-role-in-secret-money-flows/ (archive: perma.cc/XTA7-2JPH).

  5. “The UAE Defense Market—Budget Assessment and Drivers 2022,” GlobalData, February 21, 2022, www.globaldata.com/reports/the-uae-defense-market—budgetassessment-and-drivers-2022/ (archive: perma.cc/W5A6-HM7J); “Military Expenditure (Current USD),” World Bank Group, accessed February 4, 2024, https://data.worldbank.org/indicator/MSMIL.XPND.CD?skipRedirection=true&view=map (archive: perma.cc/N2ME-J6VT).

  6. Rajiv Chandrasekaran, “In the UAE, the United States Has a Quiet, Potent Ally Nicknamed ‘Little Sparta,’” Washington Post, November 9, 2014, www.washingtonpost.com/world/national-security/in-the-uae-the-united-states-has-aquiet-potent-ally-nicknamed-little-sparta/2014/11/08/3fc6a50c-643a-11e4-836c83bc4f26eb67_story.html (archive: perma.cc/3ASA-63CD).

  7. Craig Whitlock and Nate Jones, “UAE Relied on Expertise of Retired U.S. Troops to Beef Up Its Military,” Washington Post, October 18, 2022, www.washingtonpost.com/investigations/interactive/2022/uae-military-us-veterans/.

  8. Jonathan Swan, Kate Kelly, Maggie Haberman, and Mark Mazzetti, “Kushner Firm Got Hundreds of Millions from 2 Persian Gulf Nations,” New York Times, March 30, 2023, www.nytimes.com/2023/03/30/us/politics/jared-kushner-qatarunited-arab-emirates.html.

  9. Matthew Cole, “The Complete Mercenary: How Erik Prince Used the Rise of Trump to Make an Improbable Comeback,” Intercept, May 3, 2019, theintercept.com/2019/05/03/erik-prince-trump-uae-project-veritas/ .

  10. Patricia Hurtado and David Voreacos, “‘Trump Is the Man’: Barrack Touted Friend- ship to UAE in 2016,” Bloomberg, September 29, 2022, www.bloomberg.com/newsarticles/2022-09-29/-trump-is-the-man-barrack-touted-his-friendship-to-uae-in2016 (archive: perma.cc/RT7S-LGGM).

  11. Matthew Cole, “UAE Adviser Illegally Funneled Foreign Cash into Hillary Clinton’s 2016 Campaign,” Intercept, January 16, 2022, theintercept.com/2022/01/16/uae-2016-election-trump-clinton-george-nader/ (archive: perma.cc/T5KL-6HGR).

  12. Devon Pendelton, Ben Bartenstein, Farah Elbahrawy, and Nicolas Parasie, “Secretive Gulf Family’s $300 Billion Fortune Is about More than Oil,” Bloomberg, December 6, 2022, www.bloomberg.com/features/2022-worlds-richest-family-abudhabi-royals-al-nahyans/ (archive: perma.cc/3JAJ-3GR5).

  13. Simeon Kerr and Andrew England, “The Abu Dhabi Royal at the Nexus of UAE Business and National Security,” Financial Times, January 24, 2021, www.ft.comcontent/ce09911b-041d-4651-9bbb-d2a16d39ede7; Bill Marczak, “A Breej Too Far: How Abu Dhabi’s Spy Sheikh Hid His Chat App in Plain Sight,” Medium, January 2, 2020, www.medium.com/@billmarczak/how-tahnoon-bin-zayed-hid-totok-in-plainsight-group-42-breej-4e6c06c93ba6 (archive: perma.cc/KV8T-BP3F); “Former Senai Exec Roy Shloman Blossoms in Israeli Cyber,” Intelligence Online, June 8, 2023, www.intelligenceonline.com/surveillance—interception/2023/06/08/former-senai-exec-roy-shloman-blossoms-in-israeli-cyber,109991921-art; “UAE Cyber-Offensive Firm Beacon Red’s Russian Hackers Disillusioned,” Intelligence Online, May 18, 2023, www.intelligenceonlinecom/surveillance—interception/2023/05/18/uae-cyber-offensive-firm-beacon-reds-russian-hackers-disillusioned,109975806-art.

  14. Noa Landau and the Associated Press, “UAE Issues Decree Ending Israel Boycott after U.S-Brokered Deal to Normalize Ties,” Haaretz, August 29, 2020, www.haaretz.com/israel-news/2020-08-29/ty-article/uae-issues-decree-ending-israel-boycott-after-u-s-brokered-deal-to-normalize-ties/0000017f-e7d7-da9b-a1ff-efff118a0000 (archive: perma.cc/ZSJ6-JB9F).

  15. “Full Text of the Abraham Accords and Agreements between Israel and the United Arab Emirates/Bahrain,” CNN, September 15, 2020, www.cnn.com/2020/09/15politics/israel-uae-abraham-accords-documents/index.html ; Sean Gallagher, “UAE Buys Its Way toward Supremacy in Gulf Cyberwar, Using US and Israeli Experts,” Ars Technica, February 1, 2019, arstechnica.com/information-technology/2019/02/uaebuys-its-way-toward-supremacy-in-gulf-cyberwar-using-us-and-israeli-experts/ (archive: perma.cc/DX5W-KSTE).

  16. “UAE Used Israeli Spyware to Gather Intel on Qatari Royals, Lawsuits Claim,”aaretz, August 31, 2018, www.haaretz.com/israel-news/2018-08-31/ty-article/uaeused-israeli-spyware-to-track-qatari-royals/0000017f-f2b9-d5bd-a17f-f6bb091f0000.

  17. David D. Kirkpatrick and Azam Ahmed, “Hacking a Prince, an Emir and a Journalist to Impress a Client,” New York Times, August 31, 2018, https://www.nytimes.com/2018/08/31/world/middleeast/hacking-united-arab-emirates-nso-grouphtml?searchResultPosition=1.

  18. Chaim Levinson, “With Israel’s Encouragement, NSO Sold Spyware to UAE and Other Gulf States,” Haaretz, August 25, 2020, www.haaretz.com/middle-east-news2020-08-25/ty-article/.premium/with-israels-encouragement-nso-sold-spywareto-uae-and-other-gulf-states/0000017f-dbf3-d856-a37f-fff3a4ba0000 (archive: perma.cc/L93X-D9LU).

  19. “Israeli Group Uses South African Agent,” Intelligence Online, August 28, 2013, www.intelligenceonline.com/corporate-intelligence/2013/08/28/israeli-group-usessouth-african-agent,107973676-art.

  20. Shuki Sadeh, “A Shady Israeli Intel Genius, His Cyber-Spy Van and Million-Dollar Deals,” Haaretz, December 31, 2020, www.haaretz.com/israel-news/tech-news2020-12-31/ty-article-magazine/.highlight/a-shady-israeli-intel-genius-his-cyberspy-van-and-million-dollar-deals/0000017f-f21e-d497-a1ff-f29ed7c30000 (archive: perma.cc/KA5Y-FA5Y).

  21. “Karl Gumtow,” Maryland Daily Record, May 31, 2023, thedailyrecord.com/2023/05/31/karl-gumtow-2/ (archive: perma.cc/9GE8-4RE4).

  22. “CyberPoint Exports Know-How,” Intelligence Online, November 28, 2012, www.intelligenceonline.com/corporate-intelligence/2012/11/28/cyberpoint-exportsknow-how,107934137-art.

  23. Joel Schectman and Christopher Bing, “White House Veterans Helped Gulf Monarchy Build Secret Surveillance Unit,” Reuters, December 10, 2019, www.reuters.com/article/idUSKBN1YE1PE/.

  24. Lee Fang, “Adviser to Cyber Program at NYU’s UAE Campus Linked to Spy Tech Used to Repress Activists,” Intercept, July 8, 2015, www.theintercept.com/2015/0708/nyu-spyware-uae/. (archive: perma.cc/2D69-YDAQ)

  25. Alexander Cornwell, “Emerging Gulf State Cyber Security Powerhouse Growing Rapidly in Size, Revenue,” Reuters, February 1, 2018, www.reuters.com/articleidUSKBN1FL451/.

  26. Ronald Deibert, “Cyberspace Confidential (Globe and Mail Essay),” Ronald Deibert, August 9, 2010, deibert.citizenlab.ca/2010/08/cyberspace-confidential-globe-and-mail-essay/ (archive: perma.cc/SVL4-9VFK).

  27. chabermu, “RIM CEO Mike Lazaridis Ends BBC Interview,” May 11, 2011, video, 1:28, www.youtube.com/watch?v=Q6iGe7vuGeQ (archive: perma.cc/BVH4-DXNH).

  28. “DarkMatter Inaugurates R&D Centre Based in Toronto, Canada,” PR Newswire, April 13, 2016, www.prnewswire.com/news-releases/darkmatter-inaugurates-rdcentre-based-in-toronto-canada-575520061.html ; “Eugene Chin,” social media profile, LinkedIn, accessed February 4, 2024, ca.linkedin.com/in/eugenechincanada (archive: perma.cc/QR7C-WFQE).

  29. Matt Johnson, dir., BlackBerry, 2023; Toronto: Elevation Pictures, Online video.

  30. Eli Yarhi, “Jim Balsillie,” The Canadian Encyclopedia, February 26, 2012, www.thecanadianencyclopedia.ca/en/article/jim-balsillie (archive: perma.cc/N7NZ-WGM3).

  31. Mark Mazzetti, Adam Goldman, Ronen Bergman, and Nicole Perlroth, “A New Age of Warfare: How Internet Mercenaries Do Battle for Authoritarian Governments,” New York Times, March 21, 2019, www.nytimes.com/2019/03/21/us/politicsgovernment-hackers-nso-darkmatter.html.

  32. Catalin Cimpanu, “US Fines Former NSA Employees Who Provided Hacker- for-Hire Services to UAE,” Record, September 13, 2021, therecord.media/us-fines-former-nsa-employees-who-provided-hacker-for-hire-services-to-uae (archive: perma.cc/9UJD-PJJC).

  33. Office of Public Affairs, “Three Former U.S. Intelligence Community and Military Personnel Agree to Pay More than $1.68 Million to Resolve Criminal Charges Arising from Their Provision of Hacking-Related Services to a Foreign Govern- ment,” press release, US Department of Justice, September 14, 2021, www.justice.gov/opa/pr/three-former-us-intelligence-community-and-military-personnelagree-pay-more-168-million.

  34. Hiba Zayadin, “The Persecution of Ahmed Mansoor,” Human Rights Watch, January 27, 2021, www.hrw.org/report/2021/01/27/persecution-ahmed-mansoor/how-united-arab-emirates-silenced-its-most-famous-human (archive: perma.cc/HH46-B4DA).

  35. “Tribute to Artur Lige˛ska, Former Prisoner in UAE,” Human Rights Watch, June 7, 2021, www.hrw.org/news/2021/06/07/tribute-artur-ligeska-former-prisoner-uae (archive: perma.cc/4YWV-RAJ6).

  36. “Digital14 Picks Up Darkmatter’s Key Activities, Including the Vulnerabilities Researcher xen1thLabs,” Intelligence Online, January 21, 2021, www.intelligenceonline.com/surveillance—interception/2021/01/21/digital14-picks-up-darkmatter-s-keyactivities-including-the-vulnerabilities-researcher-xen1thlabs,109636378-gra.

  37. John Hudson, Ellen Nakashima, and Liz Sly, “Buildup Resumed at Suspected Chinese Military Site in UAE, Leak Says,” Washington Post, April 26, 2023, www.washingtonpost.com/national-security/2023/04/26/chinese-military-base-uae/ (archive: perma.cc/F6DN-UDF4 ); “UAE Cyber-Offensive Firm Beacon Red’s Russian Hackers Disillusioned,” Intelligence Online, May 18, 2023, https://www.intelligenceonline.com/surveillance--interception/2023/05/18/uae-cyber-offensive-firm-beacon-red-s-russian-hackers-disillusioned,109975806-art.

CHAPTER 4: BREAKFAST IN UZBEKISTAN

  1. Amir Rapaport, “The Cyber Technology Market Is Endless,” Israel Defense, December 15, 2015, https://www.israeldefense.co.il/en/node/24622.

  2. “Elbit Systems Buys Nice’s Cyber Unit for up to $158 Mln,” Reuters, May 21, 2015, www.reuters.com/article/idUSL5N0YC0XF/.

  3. Elbit Systems, “Elbit Systems to Reorganize the Business of CYBERBIT,” press release, September 18, 2017, elbitsystems.com/pr-new/elbit-systems-reorganize-business-cyberbit/ (archive: perma.cc/9UKV-LH2G).

  4. “World Report 2015: Uzbekistan—Events of 2014,” Human Rights Watch, 2015, www.hrw.org/world-report/2015/country-chapters/uzbekistan (archive: perma.cc/9FJ3-NHV8).

  5. “Ethiopia,” Minority Rights Group, June 2019, www.minorityrights.org/countryethiopia/ ; Laetitia Bader, “Ethiopia’s Other Conflict,” Human Rights Watch, July 4, 2022, www.hrw.org/news/2022/07/04/ethiopias-other-conflict (archive: perma.cc/L2LB-JXML).

  6. “Ethiopia,” Reporters without Borders, rsf.org/en/country/Ethiopia (archive: perma.cc/YYB9-H3QY); Felix Horne and Cynthia M. Wong, “They Know Everything We Do,” Human Rights Watch, March 25, 2014, www.hrw.org/report/2014/03/25/they-know-everything-we-dotelecom-and-internet-surveillance-ethiopia.

  7. Morgan Marquis-Boire, Bill Marczak, Claudio Guarnieri, and John Scott-Railton, You Only Click Twice: FinFisher’s Global Proliferation, Research Report No. 15, Citizen Lab, University of Toronto, March 13, 2013, www.citizenlab.ca/2013/03/you-only-click-twice-finfishers-global-proliferation-2/ (archive: perma.cc/B5S7-GKH3 ); Bill Marczak, John Scott-Railton, and Sarah McKune, Hacking Team Reloaded? US-Based Ethiopian Journalists Again Targeted with Spyware, Research Report No. 50, Citizen Lab, University of Toronto, March 9, 2015, citizenlab.ca/2015/03/hacking-team-reloaded-us-based-ethiopian-journalists-targeted-spyware/ (archive: perma.cc/72WV-PW48).

  8. Bill Marczak, Geoffrey Alexander, Sarah McKune, John Scott-Railton, and Ron Deibert, Champing at the Cyberbit: Ethiopian Dissidents Targeted with New Commercial Spyware, Research Report No. 102, Citizen Lab, University of Toronto, December 6, 2017, citizenlab.ca/2017/12/champing-cyberbit-ethiopian-dissidents-targeted-commercial-spyware/ (archive: perma.cc/D3G6-NFHQ).

  9. Elbit Systems Ltd., US Securities and Exchange Commission, December 31, 2011, www.sec.gov/Archives/edgar/data/1027664/000117891312000998/R10.htm.

  10. “C4 Security Ltd.,” Israel Export Institute, 2023, https://pitchbook.com/profilescompany/268044-58#overview.

  11. “Hacking Team,” WikiLeaks, July 8, 2015, wikileaks.org/hackingteam/emails/ (archive: perma.cc/VE8F-FJE4).

  12. “Cyberbit Caught Up in Zambian Financial Crisis,” Intelligence Online, October 24, 2018, www.intelligenceonline.com/corporate-intelligence/2018/10/24/cyberbitcaught-up-in-zambian-financial-crisis,108329307-art.

  13. Office of Public Affairs, “Israel’s Largest Bank, Bank Hapoalim, Admits to Conspiring with U.S. Taxpayers to Hide Assets and Income in Offshore Accounts,” press release, US Department of Justice, April 30, 2020, www.justice.gov/opa/pr/israel-s-largest-bank-bank-hapoalim-admits-conspiring-us-taxpayers-hide-assets-and-income (archive: perma.cc/37Z4-HR5T).

  14. Agence France-Presse, “Israel’s Bank Hapoalim Pays $900 Mn over Tax Evasion,FIFA Cases,” Barron’s, April 30, 2020, www.barrons.com/news/israel-s-bank-hapoalim-pays-900-mn-over-tax-evasion-fifa-cases-01588285508 (archive: perma.cc/5HM6-B744).

  15. Peter Bouckaert, “‘License to Kill’: Philippine Police Killings in Duterte’s ‘War on Drugs,’” Human Rights Watch, March 2, 2017, www.hrw.org/report/2017/03/02/license-kill/philippine-police-killings-dutertes-war-drugs (archive: perma.cc/CRE6-ADUC).

  16. “Thailand: Events of 2022,” Human Rights Watch, 2023, www.hrw.org/world-report/2023/country-chapters/thailand (archive: perma.cc/A7YA-PPGA).

  17. “Vietnam Jails Dissident for Eight Years over Facebook Posts,” Reuters, November 18, 2022, www.reuters.com/world/asia-pacific/vietnam-jails-dissident-eight-yearsover-facebook-posts-2022-11-18/.

  18. Cheryl Reed, “Citizen Journalist’s Arrest Decried by Media Rights Advocates,” Eurasianet, July 5, 2022, eurasianet.org/kazakhstan-citizen-journalists-arrest-decriedby-media-rights-advocates.

  19. Victoire Ingabire Umuhoza, “Rwanda Has to Investigate Killings of Opposition Members,” Al Jazeera, March 24, 2023, www.aljazeera.com/opinions/2023/3/24rwanda-has-to-investigate-killings-of-opposition-members; “Rwanda Classified,” Forbidden Stories, accessed May 29, 2024, https://forbiddenstories.org/projectsposts/rwanda-classified/ (archive: perma.cc/V4MH-5YZX).

  20. Fatima Hussein, “US Is Sanctioning the Pro-Russian Head of Serbian Intelligence for Alleged Corruption,” Associated Press, July 11, 2023, www.apnews.com/article/serbia-sanctions-treasury-vulin-russia-6b8e01b5595fc114094c4a3a3cf9eab5 (archive: perma.cc/W42B-AGN6).

  21. “Nigeria: Events of 2022,” Human Rights Watch, 2023, www.hrw.org/world-report/2023/country-chapters/nigeria (archive: perma.cc/6LQV-7V38).

  22. John Snow, “Shodan and Censys: The Ominous Guides through the Internet of Things,” Kaspersky Daily (blog), February 29, 2016, www.kaspersky.com/blog/shodan-censys/11430/ (archive: perma.cc/M7EU-AJMB).

  23. Morgan Marquis-Boire and Bill Marczak, From Bahrain with Love: FinFisher’s Spy Kit Exposed?, Research Report No. 9, Citizen Lab, University of Toronto, July 25, 2012, citizenlab.ca/2012/07/from-bahrain-with-love-finfishers-spy-kit-exposed/ (archive: perma.cc/N9L8-BDL5).

  24. Bill Marczak, Claudio Guarnieri, Morgan Marquis-Boire, and John Scott-Railton, Mapping Hacking Team’s “Untraceable” Spyware, Research Report No. 33, Citizen Lab, University of Toronto, February 17, 2014, www.citizenlab.ca/2014/02/mappinghacking-teams-untraceable-spyware/; Bill Marczak, Claudio Guarnieri, Morgan Marquis-Boire, and John Scott-Railton, Hacking Team and the Targeting of Ethiopian Journalists, Research Report No. 32, Citizen Lab, University of Toronto, February 12, 2014, www.citizenlab.ca/2014/02/hacking-team-targeting-ethiopian-journalists/ (archive: perma.cc/M9PE-CCNM ); Bill Marczak, Claudio Guarnieri, Morgan Marquis-Boire, John Scott-Railton, and Sarah McKune, Hacking Team’s US Nexus, Research Report No. 35, Citizen Lab, University of Toronto, February 28, 2014, www.citizenlab.ca/2014/02/hacking-teams-us-nexus/ (archive: perma.cc/S37K-QTCB).

  25. Irene Poetranto, “Open Letter to Hacking Team,” Citizen Lab, University of Toronto, August 2014, citizenlab.ca/2014/08/open-letter-hacking-team/ (archive: perma.cc/8BPD-829M).

  26. “Hacking Team,” WikiLeaks, July 8, 2015, wikileaks.org/hackingteam/emails/ (archive: perma.cc/VE8F-FJE4 ); “Eight Things We Know So Far from the Hacking Team Hack,” Privacy International, July 9, 2015, http://privacyinternational.org/news-analysis/1395/eightthings-we-know-so-far-hacking-team-hack.

  27. Morgan Marquis-Boire and Cora Currier, “A Detailed Look at Hacking Team’s Emails about Its Repressive Clients,” Intercept, July 7, 2015, www.theintercept.com2015/07/07/leaked-documents-confirm-hacking-team-sells-spyware-repressivecountries/.

  28. David Vincenzetti, “URGENT: Yet Another Citizen Labs’ Attack,” email, June 24, 2014, www.wikileaks.org/hackingteam/emails/emailid/179377 (archive: perma.cc/YJ2T-RK8J), in “Hacking Team,” WikiLeaks, July 8, 2015.

  29. David Vincenzetti,“Re: URGENT: Yet Another Citizen Labs’ Attack,” email, June 30, 2014, www.wikileaks.org/hackingteam/emails/emailid/171363 (archive: perma.cc/2JJY-CXWU), in “Hacking Team,” WikiLeaks, July 8, 2015.

  30. Lorenzo Franceschi-Bicchierai, “Hacking Team Founder: ‘Hacking Team Is Dead,’”ice, May 26, 2020, www.vice.com/en/article/n7wbnd/hacking-team-is-dead (archive: perma.cc/D9QT-JSDA).

  31. Lorenzo Franceschi-Bicchierai, “Founder of Spyware Maker Hacking Team Arrested for Attempted Murder: Local Media,” TechCrunch, November 29, 2023, techcrunch.com/2023/11/29/founder-of-spyware-maker-hacking-team-arrested-for-attempted-murder-local-media/ (archive: perma.cc/QS2T-J5CF ). Charges against Vincenzetti are still pending at the time of writing.

  32. Vice TV, “An Interview with Hacker ‘Phineas Fisher’ as a Puppet | CYBERWAR,” July 20, 2016, video, 5:45, www.youtube.com/watch?v=BpyCl1Qm6Xs (archive: perma.cc/MZS3-XQKY).

  33. Jakub Dalek, Lex Gill, Bill Marczak, Sarah McKune, Naser Noor, Joshua Oliver, Jon Penney, Adam Senft, and Ron Deibert, Planet Netsweeper, Research Report No. 108, Citizen Lab, University of Toronto, April 25, 2018, www.citizenlab.ca/2018/04/planet-netsweeper/ (archive: perma.cc/C9YJ-EE7H).

  34. Ronald Deibert, “Ottawa Needs to Act on Global Censorship of LGBTQ2+ Content,” Hill Times, August 2, 2018, www.hilltimes.com/story/2018/08/02/ottawaneeds-act-global-censorship-lgbtq2-content/262275/ (archive: perma.cc/WY5Q-CMQC).

  35. Jakub Dalek, Ron Deibert, Sarah McKune, Phillipa Gill, Adam Senft, and Naser Noor, Information Controls during Military Operations, Research Report No. 66, Citizen Lab, University of Toronto, October 21, 2015, www.citizenlab.ca/2015/10/information-controls-military-operations-yemen/; Ron Deibert, “On Research in the Public Interest,” Citizen Lab, University of Toronto, July 26, 2016, citizenlab.ca/2016/07/research-interest/.

  36. Protection of Public Participation Act, 2015, S.O. 2015, c. 23—Bill 52, www.ontario.ca/laws/statute/s15023.

  37. Morgan Marquis-Boire, Jakub Dalek, Sarah McKune, Matthew Carrieri, Masashi Crete-Nishihata, Ron Deibert, Saad Omar Khan, Helmi Noman, John Scott- Railton, and Greg Wiseman, Planet Blue Coat: Mapping Global Censorship and Surveil- lance Tools, Research Report No. 13, Citizen Lab, University of Toronto, January 15, 2013, citizenlab.ca/2013/01/planet-blue-coat-mapping-global-censorship-and-surveillance-tools/ (archive: perma.cc/CBE5-YB5L).

  38. Jakub Dalek and Adam Senft, Behind Blue Coat: Investigations of Commercial Filtering in Syria and Burma, Research Report No. 1, Citizen Lab, University of Toronto, November 9, 2011, citizenlab.ca/2011/11/behind-blue-coat/ (archive: perma.cc/DS8X-BZQJ).

  39. Bill Marczak, Jakub Dalek, Sarah McKune, Adam Senft, John Scott-Railton, and Ron Deibert, Bad Traffic: Sandvine’s PacketLogic Devices Used to Deploy GovernmentSpyware in Turkey and Redirect Egyptian Users to Affiliate Ads?, Research Report No. 107, Citizen Lab, University of Toronto, March 9, 2018, citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-deploy-government-spyware-turkey-syria/ (archive: perma.cc/9VJN-6KTB).

  40. Linda R. Rothstein, letter to Lyndon Cantor, CEO of Sandvine, March 8, 2018, citizenlab.ca/wp-content/uploads/2018/03/UofT-Sandvine-Letter-to-Lyndon-Cantor-signed-8-March-2018.pdf (archive: perma.cc/BR7S-8VMU).

  41. Bill Marczak, John Scott-Railton, Daniel Roethlisberger, Bahr Abdul Razzak, Siena Anstis, and Ron Deibert, “Predator in the Wires: Ahmed Eltantawy Targeted with Predator Spyware after Announcing Presidential Ambitions,” Citizen Lab, University of Toronto, September 22, 2023, citizenlab.ca/2023/09/predator-in-the-wires-ahmed-eltantawy-targeted-with-predator-spyware-after-announcing-presidential-ambitions/ (archive: perma.cc/YYM8-FKZY).

  42. “About the Security Content of iOS 17.0.1 and iPadOS 17.0.1,” Apple Support, November 15, 2023, support.apple.com/en-us/106369 (archive: perma.cc/X7FV-68BS).

  43. Office of the Spokesperson, “The United States Adds Sandvine to the Entity List for Enabling Human Rights Abuses,” press release, US Department of State, February 28, https://www.state.gov/the-united-states-adds-sandvine-to-the-entity-list-for-enabling-human-rights-abuses/ (archive: perma.cc/GA62-KANL).

  44. Bill Marczak, John Scott-Railton, Siddharth Prakash Rao, Siena Anstis, and Ron Deibert, Running in Circles: Uncovering the Clients of Cyberespionage Firm Circles, Research Report No. 133, Citizen Lab, University of Toronto, December 1, 2020, www.citizenlab.ca/2020/12/running-in-circles-uncovering-the-clients-of-cyberespionage-firm-circles /.

  45. Mark W. Zacher with Brent A. Sutton, Governing Global Networks: International Regimes for Transportation and Communications, Cambridge Studies in International Relations 44 (Cambridge: Cambridge University Press, 1995), https://doi.org/10.1017/CBO9780511521812 (archive: perma.cc/FXG6-5AQ7 ); Josie Middleton, “Propelling Women in Tech across Emerging Markets: Our Reflections on Female Entrepreneurship,” GSMA, June 18, 2019, https://www.gsma.com/mobilefordevelopmentblog/propelling-women-in-tech-across-emerging-markets-our-reflections-onfemale-entrepreneurship/; SAP, “Who Run the Telco World? Gender Disparity in the Telecommunications Sector,” http://www.sapevents.edgesuite.net/previewhubwomen-in-telco/pdfs/Women%20In%20Telco%20Slideshare.pdf.

  46. Nils Putnins, “Research on Signaling System 7 (SS7)—Risks, Attacks and Precautions,” SEQ Cybersecurity Blog, September 15, 2022, web.archive.org/web20220915101054/blog.seq.lv/research-on-signaling-system-7-ss7/.

  47. Robert Krulwich, “Playful Pranks from Apple’s Founder,” NPR, January 3, 2009, www.npr.org/templates/story/story.php?storyId=98977379 (archive: perma.cc/BEP6-5N5Y).

  48. Sergey Puzankov, “Back to the Future: Cross-Protocol Attacks in the Era of 5G,” Positive Technologies, accessed February 7, 2024, i.blackhat.com/asia-20/Friday/asia-20-Puzankov-Back-To-The-Future-Cross-Protocol-Attacks-In-The-Era-Of-5G.pdf (archive: perma.cc/A9WX-YEJU).

  49. Putnins, “Research on Signaling System 7 (SS7).”

  50. Al Araby, August 31, 2018, https://web.archive.org/web/20190409205521/ (archive: perma.cc/G8EJ-QQDL ) www.alaraby.co.uk/file/get/4749a75b-fc46-4917-85d3-7f8b41d4b34a ; Ogala Emman-uel, “How Governors Dickson, Okowa Spend Billions on High Tech Spying on Opponents, Others,” Premium Times (Nigeria), June 9, 2016, www.premiumtimesngcom/investigationspecial-reports/204987-investigation-governors-dickson-okowaspend-billions-high-tech-spying-opponents-others.html.

  51. “Thailand: Investigate Alleged Army Torture,” Human Rights Watch, November 22, 2016, https://www.hrw.org/news/2016/11/23/thailand-investigate-alleged-army-torture (archive: perma.cc/Y2WN-W8UP).

  52. John Scott-Railton, Bill Marczak, Claudio Guarnieri, and Masashi Crete-Nishihata, Bitter Sweet: Supporters of Mexico’s Soda Tax Targeted with NSO Exploit Links, Research Report No. 89, Citizen Lab, University of Toronto, February 11, 2017, www.citizenlab.ca/2017/02/bittersweet-nso-mexico-spyware/ (archive: perma.cc/G9J2-T6RF ); John Scott- Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware, Research Report No. 93, Citizen Lab, University of Toronto, June 19, 2017, www.citizenlab.ca/2017/06/reckless-exploit-mexico-nso/ (archive: perma.cc/LPC8-LMSS ); John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware, Research Report No. 94, Citizen Lab, University of Toronto, June 29, 2017, www.citizenlabca/2017/06/more-mexican-nso-targets/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless III: Investigation into Mexican Mass Disappearance Targeted with NSO Spyware, Research Report No. 96, Citizen Lab, University of Toronto, July 10, 2017, citizenlab.ca/2017/07/mexicodisappearances-nso/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless IV: Lawyers for Murdered Mexican Women’s Families Targeted with NSO Spyware, Research Report No. 98, Citizen Lab, University of Toronto, August 2, 2017, citizenlab.ca/2017/08/lawyers-murderedwomen-nso-group/ ; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless V: Director of Mexican Anti-Corruption Group Targeted with NSO Group’s Spyware, Research Report No. 99, Citizen Lab, University of Toronto, August 30, 2017, citizenlab.ca/2017/08/nso-spyware-mexicocorruption/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless VI: Mexican Journalists Investigating Cartels Targeted with NSO Spyware Following Assassination of Colleague, Research Report No. 116, Citizen Lab, University of Toronto, November 27, 2018, citizenlab.ca/2018/11/mexican-journalists-investigating-cartels-targeted-nso-spywarefollowing-assassination-colleague/; John Scott-Railton, Bill Marczak, Siena Anstis, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless VII: Wife of Journalist Slain in Cartel-Linked Killing Targeted with NSO Group’s Spyware, Research Report No. 117, Citizen Lab, University of Toronto, March 20, 2019, citizenlab.ca/2019/03/nso-spyware-slain-journalists-wife/.

  53. “UPR Submission—Nigeria 2018,” Front Line Defenders, April 7, 2018, www.frontlinedefenders.org/en/statement-report/upr-submission-nigeria-2018 (archive: perma.cc/7C7A-DKZ5).

  54. “Individuals Using the Internet (% of Population),” World Bank Group, accessed February 7, 2024, https://data.worldbank.org/indicator/IT.NET.USER.ZS?skip Redirection=true&view=map; Marczak, et al., Champing at the Cyberbit.

  55. Stephanie Kirchgaessner, “More Polish Opposition Figures Found to Have Been Targeted by Pegasus Spyware,” Guardian, February 17, 2022, https://www.heguardian.com/world/2022/feb/17/more-polish-opposition-figures-found-tohave-been-targeted-by-pegasus-spyware (archive: perma.cc/VX2N-7S43).

  56. Bill Marczak, John Scott-Railton, Sarah McKune, Bahr Abdul Razzak, and Ron Deibert, Hide and Seek: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries, Research Report No. 113, Citizen Lab, University of Toronto, September 18, 2018, www.citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/ (archive: perma.cc/TJ7M-8PMP ).

CHAPTER 5: “TRUST ME, I AM THE ONE”

  1. (@YakathahChannel), YouTube channel, accessed February 12, 2024, https:/www.youtube.com/@YakathahChannel.

  2. Mike Armstrong,“Saudi Dissident in Quebec Says People Who Ordered Khashoggi’s Killing Were Also after Him,” Global News, October 22, 2018, https://globalnewsca/news/4583529/saudi-dissident-omar-abdulaziz-jamal-khashoggi/.

  3. Matthew Braga, “A Quebecer Spoke Out against the Saudis—Then Learned He Had Spyware on His iPhone,” CBC News, October 1, 2018, https://www.cbc.canews/science/omar-abdulaziz-spyware-saudi-arabia-nso-citizen-lab-quebec1.4845179.

  4. Jillian Kestler-D’Amours, “Saudi Dissident Vows to ‘Keep Fighting’ after Year of Intimidation, Arrests and Murder,” Middle East Eye, December 28, 2018, https:/www.middleeasteye.net/news/saudi-dissident-vows-keep-fighting-after-yearintimidation-arrests-and-murder.

  5. Tim Adams, “Khashoggi Confidant Omar Abdulaziz: ‘I’m Worried about the Safety of the People of Saudi Arabia,’” Guardian, February 20, 2021, www.theguardian.com/film/2021/feb/20/me-jamal-khashoggi-mohammed-bin-salman-omar-abdulazizthe-dissident-netflix.

  6. Nina dos Santos and Michael Kaplan, “Jamal Khashoggi’s Private WhatsApp Messages May Offer New Clues to Killing,” CNN, December 4, 2018, https://www.cnn.com/2018/12/02/middleeast/jamal-khashoggi-whatsapp-messages-intl/index.html (archive: perma.cc/3R95-JPCV).

  7. Shane Harris and Souad Mekhennet, “Saudi Crown Prince Exchanged Messages with Aide Alleged to Have Overseen Khashoggi Killing,” Washington Post, December 2, 2018, www.washingtonpost.com/world/national-security/saudi-crown-prince-exchanged-messages-with-aide-alleged-to-have-overseen-khashoggi-killing/2018/12/01/faa43758-f5c3-11e8-9240-e8028a62c722_story.html (archive: perma.cc/FT4Z-F5BU).

  8. David Ignatius, “The Khashoggi Killing Had Roots in a Cutthroat Saudi Family Feud,” Washington Post, November 27, 2018, www.washingtonpost.com/opinions/global-opinions/the-khashoggi-killing-had-roots-in-a-cutthroat-saudi-family-feud/2018/11/27/6d79880c-f17b-11e8-bc79-68604ed88993_story.html (archive: perma.cc/W6K7-W2AE).

  9. Leyland Cecco, “Saudi Foreign Minister Demands Canada Stop Treating It like a ‘Banana Republic,’” Guardian, September 28, 2018, www.theguardian.com/world/2018/sep/28/saudi-foreign-minister-demands-canada-stop-treating-it-like-a-banana-republic (archive: perma.cc/KUF4-LQBF).

  10. “Saudi Arabia Arrests Sister of Imprisoned Blogger,” CBC News, August 1, 2018, https://www.cbc.ca/news/canada/montreal/samar-badawi-arrested-1.4770268 (archive: perma.cc/CZE5-4AHY).

  11. Foreign Policy CAN (@CanadaFP), “Canada is gravely concerned about additional arrests of civil society and women’s rights activists in #SaudiArabia, including Samar Badawi. We urge the Saudi authorities to immediately release them and all other peaceful #humanrights activists,” X, August 3, 2018, https://x.com/CanadaFP/status1025383326960549889 (archive: perma.cc/X9W8-F92R).

  12. Mark Gollom, “Saudi Arabia ‘Allergic to Criticism,’ Making Example out of Canada, Analysts Say,” CBC News, August 8, 2018, https://www.cbc.ca/news/politics/saudiarabia-sanctions-canada-ambassador-1.4776502 (archive: perma.cc/N9YN-4YLU).

  13. Foreign Ministry (@KSAmofaEN), “#Statement | The negative and surprising attitude of #Canada is an entirely false claim and utterly incorrect,” X, August 5, 2018, https://x.com/KSAmofaEN/status/1026241364604932096 (archive: perma.cc/E3RB-K873 ); Foreign Ministry (@KSAmofaEN), “#Statement | KSA through its history has not and will not accept any form of interfering in the internal affairs of the Kingdom. The KSA considers the Canadian position an attack on the KSA and requires a firm stance to deter who attempts to undermine the sovereignty of the KSA,” X, August 5, 2018, https://xcom/KSAmofaEN/status/1026241371361996800?lang=en.

  14. Foreign Ministry (@KSAmofaEN), “#Statement | Any other attempt to inter- fere with our internal affairs from #Canada, means that we are allowed to interfere in #Canada’s internal affairs,” X, August 5, 2018, https://x.com/i/web/status1026241374516113409 (archive: perma.cc/S8AF-HYVX).

  15. Ryan Patrick Jones, “Saudi Arabian Group Apologizes for Posting Image Appearing to Threaten Canada with 9/11-Style Attack,” CBC News, August 6, 2018, www.cbc.ca/news/canada/toronto/saudi-arabian-group-apologizes-for-posting-image-appearing-to-threaten-canada-with-9-11-style-attack-1.4775509 (archive: perma.cc/PD4K-38B6).

  16. Eric Lichtblau and James Risen, “9/11 and the Saudi Connection,” Intercept, September 11, 2021, theintercept.com/2021/09/11/september-11-saudi-arabia/ (archive: perma.cc/8XH9-K7D6 ); Daniel Benjamin and Steven Simon, “New 9/11 Evidence Points to Deep Saudi Complicity,” Atlantic, May 20, 2024, https://www.theatlantic.com/ideas/archive2024/05/september-11-attacks-saudi-arabia-lawsuit/678430/.

  17. Jeremy Nuttall, “Case against Saudi Crown Prince by Toronto Resident Dismissed in U.S. Court,” Toronto Star, October 27, 2022, www.thestar.com/news/canada/caseagainst-saudi-crown-prince-by-toronto-resident-dismissed-in-u-s-court/article6fc786a9-2056-5806-843f-3bf79243a430.html.

  18. Bill Marczak, John Scott-Railton, and Ron Deibert, NSO Group Infrastructure Linked to Targeting of Amnesty International and Saudi Dissident, Research Report No. 110, Citizen Lab, University of Toronto, July 31, 2018, citizenlab.ca/2018/07/nso-spyware-targeting-amnesty-international/ (archive: perma.cc/24A8-PW7V).

  19. Bethan McKernan, “Jamal Khashoggi Murder: Timeline of Key Events,” Guardian, December 23, 2019, https://www.theguardian.com/world/2019/dec/23/jamal-khashoggi-timeline-of-key-events.

  20. Karen Attiah, “Let the World Hear Jamal Khashoggi’s Last Words in Arabic,” Washington Post, September 29, 2019, https://www.washingtonpost.com/opinions/201909/30/let-world-hear-jamal-khashoggis-last-words-arabic/.

  21. David Hearst, “Jamal Khashoggi’s Killing Took Seven Minutes, Turkish Source Tells MEE,” Middle East Eye, December 10, 2018, https://www.middleeasteye.net/news/jamal-khashoggis-killing-took-seven-minutes-turkish-source-tells-mee.

  22. Gul Tuysuz, Salma Abdelaziz, Ghazi Balkiz, Ingrid Formanek, and Clarissa Ward, “Surveillance Footage Shows Saudi ‘Body Double’ in Khashoggi’s Clothes after He Was Killed, Turkish Source Says,” CNN, October 23, 2018, https://www.cnn.com2018/10/22/middleeast/saudi-operative-jamal-khashoggi-clothes/index.html.

  23. Cassandra Garrison, “A High-Five from Putin and That Awkward Photograph— Saudi Prince’s G20 Summit,” Reuters, December 2, 2018, https://www.reuters.comarticle/idUSKCN1O1047/.

  24. Kestler-D’Amours, “Saudi Dissident Vows to ‘Keep Fighting.’”

  25. Ben Hubbard, “The Rise and Fall of M.B.S.’s Digital Henchman,” New York Times, March 13, 2020, www.nytimes.com/2020/03/13/sunday-review/mbs-hacking.html (archive: perma.cc/3ZUM-J5MM).

  26. “‘Saudi Arabia’s Steve Bannon,’ Saud al-Qahtani, Still Active despite ‘Firing’ over Khashoggi Murder,” New Arab, February 12, 2019, https://www.newarab.com/news/saud-al-qahtani-still-active-despite-firing-over-khashoggi-murder (archive: perma.cc/E4X8-M3GB).

  27. Michael Forsythe, Mark Mazzetti, Ben Hubbard, and Walt Bogdanich, “Consulting Firms Keep Lucrative Saudi Alliance, Shaping Crown Prince’s Vision,” New York Times, November 4, 2018, https://www.nytimes.com/2018/11/04/world/middleeastmckinsey-bcg-booz-allen-saudi-khashoggi.html.

  28. Kate Conger, Mike Isaac, Katie Benner, and Nicole Perlroth, “Former Twitter Employees Charged with Spying for Saudi Arabia,” New York Times, November 6, 2019, https://www.nytimes.com/2019/11/06/technology/twitter-saudi-arabia-spieshtml.

  29. Katie Paul, “Twitter Suspends Accounts Linked to Saudi Spying Case,” Reuters, December 20, 2019, https://www.reuters.com/article/idUSKBN1YO1JU/.

  30. “New Disclosures to Our Archive of State-Backed Information Operations,” Blog, December 20, 2019, blog.x.com/en_us/topics/company/2019/new-disclosures-to-our-archive-of-state-backed-information-operations.

  31. Shane Harris, Greg Miller, and Josh Dawsey, “CIA Concludes Saudi Crown Prince Ordered Jamal Khashoggi’s Assassination,” Washington Post, November 16, 2018, www.washingtonpost.com/world/national-security/cia-concludes-saudi-crown-prince-ordered-jamal-khashoggis-assassination/2018/11/16/98c89fe6-e9b2-11e8-a939-9469f1166f9d_story.html (archive: perma.cc/B37D-VUPM).

  32. Lesley Stahl, “CEO of Israeli Spyware-Maker NSO on Fighting Terror, Khashoggi Murder, and Saudi Arabia,” CBS News, May 14, 2019, https://www.cbsnews.comnews/interview-with-ceo-of-nso-group-israeli-spyware-maker-on-fighting-terrorkhashoggi-murder-and-saudi-arabia-60-minutes/.

  33. Dana Priest, “A UAE Agency Put Pegasus Spyware on Phone of Jamal Khashoggi’s Wife Monthsbefore His Murder,New Forensics Show,”Washington Post,December 21, 2021, https://www.washingtonpost.com/nation/interactive/2021/hanan-elatr-phonepegasus/.

  34. Bill Marczak, John Scott-Railton, Siena Anstis, Bahr Abdul Razzak, and Ron Deibert, “Breaking the News: New York Times Journalist Ben Hubbard Hacked with Pegasus after Reporting on Previous Hacking Attempts,” Citizen Lab, University of Toronto, October 24, 2021, https://citizenlab.ca/2021/10/breaking-news-new-york-times-journalist-ben-hubbard-pegasus/ (archive: perma.cc/6BXV-RKZD).

  35. Ben Hubbard, “Someone Tried to Hack My Phone. Technology Researchers Accused Saudi Arabia,” New York Times, January 28, 2020, www.nytimes.com/202001/28/reader-center/phone-hacking-saudi-arabia.html.

  36. Ben Hubbard, “I Was Hacked. The Spyware Used against Me Makes Us All Vulner- able,” New York Times, October 24, 2021, www.nytimes.com/2021/10/24/insiderhacking-nso-surveillance.html.

  37. Amnesty International, “Massive Data Leak Reveals Israeli NSO Group’s Spyware Used to Target Activists, Journalists, and Political Leaders Globally,” press release, July 19, 2021, https://www.amnesty.org/en/latest/press-release/2021/07/the-pegasus-project/ (archive: perma.cc/MD52-Q92W).

  38. “Pegasus: Who Are the Alleged Victims of Spyware Targeting?,” BBC, July 22, 2021, https://www.bbc.com/news/world-57891506 (archive: perma.cc/V97T-W53F).

  39. Office of the Director of National Intelligence, “Assessing the Saudi Government’s Role in the Killing of Jamal Khashoggi,” February 11, 2021, https://www.dni.govfiles/ODNI/documents/assessments/Assessment-Saudi-Gov-Role-in-JK-Death20210226v2.pdf.

  40. “‘Antithesis of Justice’: Khashoggi Verdict Roundly Condemned,” Al Jazeera, December 24, 2019, https://www.aljazeera.com/news/2019/12/24/antithesis-of-justice-khashoggi-verdict-roundly-condemned.

  41. Office of the Director of National Intelligence, “Assessing the Saudi Government’s Role.”

  42. Warren P. Strobel, “CIA Intercepts Underpin Assessment Saudi Crown Prince Targeted Khashoggi,” Wall Street Journal, December 1, 2018, www.wsj.com/articlescia-intercepts-underpin-assessment-saudi-crown-prince-targeted-khashoggi1543640460.

  43. Robert Tait, “Biden Accused of Betrayal of Khashoggi over Push to Deepen Saudi Ties,” Guardian, October 7, 2023, https://www.theguardian.com/us-news/2023/oct/07/biden-saudi-arabia-mohammed-bin-salman-jamal-khashoggi (archive: perma.cc/ASQ3-RRYM).

  44. Darren Major, “Canada, Saudi Arabia Agree to Restore Relations 5 Years after Diplomatic Feud,” CBC News, May 24, 2023, https://www.cbc.ca/news/politicscanada-saudi-arabia-restoring-diplomatic-relations-1.6853285 (archive: perma.cc/TT6G-DEQT).

  45. Steven Chase, “Saudi Arabia Is Top Export Destination for Canadian Arms after United States in 2022,” Globe and Mail, June 4, 2023, https://www.theglobeandmail.com/politics/article-saudi-arabia-canadian-arms-exports/.

  46. Omar Abdulaziz v. Twitter Inc., Case No. 19-cv-06694-LB (N.D. Cal. Feb. 18, 2021).

  47. Oliver Holmes and Stephanie Kirchgaessner, “Israeli Spyware Firm Fails to Get Hacking Case Dismissed,” Guardian, January 16, 2020, www.theguardian.com/world/2020/jan/16/israeli-spyware-firm-nso-hacking-case.

  48. “Bindmans Launches Legal Action in the United Kingdom on Misuse of PegasusSpyware,” Bindmans, April 19, 2022, www.bindmans.com/knowledge-hub/news/bindmans-launches-legal-action-in-the-united-kingdom-on-misuse-of-pegasus-spyware/ (archive: perma.cc/GQ2Q-LLH2 ); Hanan Elatr Khashoggi v. NSO Group Technologies Limited and Q Cyber Technologies Limited, Case No. 1:2023cv00779—Document 50 (E.D. Va. Oct. 26, 2023), https://law.justia.com/cases/federal/district-courts/virginia/vaedce/1:2023cv00779/539227/50/ (archive: perma.cc/CH3V-GB93).

  49. Adams, “Khashoggi Confidant Omar Abdulaziz.”

  50. Stephanie Kirchgaessner, “Saudi Dissident Warned by Canadian Police He Is a Target,” Guardian, June 21, 2020, https://www.theguardian.com/world/2020/jun21/exclusive-saudi-dissident-warned-by-canadian-police-he-is-a-target.

  51. Douglas Quan and Nadine Yousif, “He Claimed Asylum in Canada and Spoke Out against the Saudi Regime. So Why Has Ahmed Alharby Gone Home?,” Toronto Star, February 19, 2021, https://www.thestar.com/news/canada/he-claimed-asylum-in-canada-and-spoke-out-against-the-saudi-regime-so-why-has/article_2c28e941-f7b7-5715-bcb1-c55efb917aa8.html (archive: perma.cc/ESG3-CUNE).

  52. Douglas Quan, Alex Boutilier, and Nadine Yousif, “Canada Needs to Investi- gate Saudi Dissident’s Mysterious Return to Homeland, Critics Say,” Toronto Star, February 23, 2021, https://www.thestar.com/news/canada/canada-needs-toinvestigate-saudi-dissident-s-mysterious-return-to-homeland-critics-say/articleef4e3459-c2f9-5457-9d8c-a67558753746.html.

  53. Kestler-D’Amours, “Saudi Dissident Vows to ‘Keep Fighting.’”

CHAPTER 6: “HOW OFTEN DO YOU PRAY?”

  1. Bill Hicks, “From Torture Victim to Human Rights Student,” BBC, October 17, 2017, www.bbc.com/news/business-41639458 (archive: perma.cc/7S63-AZDZ ); Melissa Petro, “After Surviving Torture, Noura al-Jizawi Is Fighting for Other Syrian Prisoners,” Vice, January 6, 2017, www.ice.com/en/article/gyxgaw/noura-al-jizawi-profile-syrian-female-prisoners.

  2. John Scott-Railton, Bahr Abdul Razzak, Adam Hulcoop, Matt Brooks, and Katie Kleemola, Group5: Syria and the Iranian Connection, Research Report No. 76, Citizen Lab, University of Toronto, August 2, 2016, citizenlab.ca/2016/08/group5-syria/ (archive: perma.cc/2V4Y-TG2U).

  3. David D. Kirkpatrick, “Israeli Software Helped Saudis Spy on Khashoggi, Lawsuit Says,” New York Times, December 2, 2018, www.nytimes.com/2018/12/02/worldmiddleeast/saudi-khashoggi-spyware-israel.html.

  4. Ed Pilkington, “Harvey Weinstein Hired Black Cube to Block New York Timesrticle, Jury Hears,” Guardian, January 30, 2020, https://www.theguardian.com/film/2020/jan/30/harvey-weinstein-black-cube-new-york-times (archive: perma.cc/KUN5-TZLD).

  5. Raphael Satter, “A Conversation with a Spy,” Associated Press, www.documentcloud.org/documents/6426634-John-Scott-Railton-s-Conversation-with-Michel#document/ .

  6. Adam Entous and Ronan Farrow, “Private Mossad for Hire,” New Yorker, February 11, 2019, www.newyorker.com/magazine/2019/02/18/private-mossad-for-hire (archive: perma.cc/R8L2-UJNP ); Ronald. Deibert, “Subversion Inc: The Age of Private Espionage,” Journal of Democracy 33, no. 2 (April 2022): 28–44, https://www.journalofdemocracy.org/articles/subversioninc-the-age-of-private-espionage/.

  7. (archive: perma.cc/65R6-38L7 ). Hagar Shezaf and Yaniv Kubovich, “Israeli Army Conducted Online Psy-Op against Israeli Public during Gaza War,” Haaretz, March 22, 2023, www.haaretz.com/israelnews/security-aviation/2023-03-22/ty-article-magazine/.premium/israeli-armyconducted-online-psy-op-against-israeli-public-during-gaza-war/00000186-f972df90-a19e-f9fff22a0000.

  8. Mike Dvilyanski, David Agranovich, and Nathaniel Gleicher, “Threat Report on the Surveillance-for-Hire Industry,” Meta, December 16, 2021, about.fb.com/wp-content/uploads/2021/12/Threat-Report-on-the-Surveillance-for-Hire-Industry.pdf (archive: perma.cc/W7P8-UMH5).

  9. Naomi Nix, “Meta to Begin Fresh Layoffs, Cutting Heavily among Business Staff,”ashington Post, May 23, 2023, https://www.washingtonpost.com/technology/202305/23/meta-layoffs-misinformation-facebook-instagram/.

  10. John Scott-Railton, Adam Hulcoop, Bahr Abdul Razzak, Bill Marczak, Siena Anstis, and Ron Deibert, Dark Basin: Uncovering a Massive Hack-for-Hire Operation, Research Report No. 128, Citizen Lab, University of Toronto, June 9, 2020, citizenlab.ca/2020/06/dark-basin-uncovering-a-massive-hack-for-hire-operation/ .

  11. Adam Hulcoop, John Scott-Railton, Peter Tanchak, Matt Brooks, and Ron Deibert, Tainted Leaks: Disinformation and Phishing with a Russian Nexus, Research Report No. 92, Citizen Lab, University of Toronto, May 25, 2017, citizenlab.ca/2017/05/tainted-leaks-disinformation-phish/ (archive: perma.cc/4EKM-Y8NB).

  12. Spencer Walrath, “Activists Now Suggest Exxon Is Responsible for . . . a Global Hacking Ring?,” EID Climate (blog), June 10, 2020, https://eidclimate.org/activists-now-suggest-exxon-is-responsible-for-a-global-hacking-ring/ (archive: perma.cc/9CJZ-N9T5 ); Emily Holden, “Hack-for-hire group targeted climate activists behind #ExxonKnew campaign,” Guardian, June 11, 2020, https://www.theguardian.com/technology/2020/jun/11exxon-hack-for-hire-climate-activists-campaign.

  13. Jasper Jolly, “Covert Cameras and Alleged Hacking: How Bust Payments Company Wirecard ‘Hired Spies and Lawyers to Silence Critics,’” Guardian, March 4, 2023, www.theguardian.com/business/2023/mar/04/covert-cameras-alleged-hacking-how-bust-payments-company-wirecard-hired-spies-lawyers-silence-critics (archive: perma.cc/QR76-BRSS ); see also Zatarra Research & Investigations, viceroyresearch.org/wp-content/uploads/2020/07/final-main-report-zatarra-edited-3.pdf .

  14. Dan McCrum, “Wirecard and Me: Dan McCrum on Exposing a Criminal Enter- prise,” Financial Times, September 3, 2020, https://www.ft.com/content/745e34a1-0ca7-432c-b062-950c20e41f03 (archive: perma.cc/63NT-SYE2).

  15. Kate Connolly, “Ex-Wirecard CEO Arrested on Suspicion of Falsifying Accounts,”uardian, June 23, 2020, www.theguardian.com/business/2020/jun/23/former-wirecard-ceo-markus-braun-arrested-in-germany (archive: perma.cc/Z8GZ-4SPF ); “Wirecard: Scandal-Hit Firm Files for Insolvency,” BBC, June 25, 2020, https://www.bbc.com/news/business-53176003 (archive: perma.cc/6G5J-DK9A).

  16. Olaf Storbeck, “German Spies Shunned Offer to Meet Wirecard Fugitive Jan Marsalek in Moscow,” Financial Times, April 13, 2022, www.ft.com/content/5ba4eedc-992e-4e64-9bb1-9d81b379ea00 (archive: perma.cc/6TYB-WPYL).

  17. Helen Warrell, Sam Jones, and Paul Murphy, “From Payments to Armaments: The Double Life of Wirecard’s Jan Marsalek,” Financial Times, July 10, 2020, www.ft.comcontent/511ecf86-ab40-486c-8f76-b8ebda4cc669.

  18. Paul Murphy, “Wirecard Critics Targeted in London Spy Operation,” Financial Times, December 11, 2019, www.ft.com/content/d94c938e-1a84-11ea-97df-cc63de1d73f4 (archive: perma.cc/8ZFF-P9DB).

  19. Murphy, “Wirecard Critics Targeted in London.”

  20. Christo Grozev, “World’s Most Wanted Man Jan Marsalek Located in Belarus; Data Points to Russian Intel Links,” Bellingcat, July 18, 2020, https://www.bellingcat.com/news/uk-and-europe/2020/07/18/worlds-most-wanted-man-jan-marsaleklocated-in-belarus-data-points-to-russian-intel-links/.

  21. Sam Jones, “Wirecard Fugitive Helped Run Russian Spy Operations across Europe,” Financial Times, April 5, 2024, https://www.ft.com/content/c3b50060-aa53-40fd-a698-579e8e1ae67d (archive: perma.cc/M47G-4GVM ); Jörg Diehl et al., “An Agent for Russia? The Double Life of the Former Wirecard Executive Jan Marsalek,” Der Spiegel, March 5, 2024, https://www.spiegel.de/international/business/jan-marsalek-an-agent-for-russia-the-double-life-of-the-former-wirecard-executive-a-7e667c03-6690-41e6-92ad-583d94ba97e0 (archive: perma.cc/4F47-JWF3).

  22. Warrell, Jones, and Murphy, “From Payments to Armaments.”

  23. Ben Taub, “How the Biggest Fraud in German History Unravelled,” New Yorker, February 27, 2023, https://www.newyorker.com/magazine/2023/03/06/how-the-biggest-fraud-in-german-history-unravelled (archive: perma.cc/94GG-UYR6).

  24. Matthew Karnitschnig, “Putin’s Hijacked Austria’s Spy Service. Now He’s Going after Its Government,” Politico, May 24, 2024, https://www.politico.eu/article/vladimir-putin-austria-spy-service-bvt-government-intelligence-wirecard-jan-marsalek-freedom-party/ (archive: perma.cc/J2QN-LAMA).

  25. Michael Copley and Jeff Brady, “Private Detective Who Led a Hacking Attack against Climate Activists Gets Prison Time,” NPR, November 16, 2023, https://www.pr.org/2023/11/16/1213320496/azari-israeli-private-detective-hacking-climatechange-activists-exxonmobil (archive: perma.cc/CZ2V-XBYD).

  26. “BellTrox Affair Scares Corporate Intelligence World,” Intelligence Online, June 24, 2020, https://www.intelligenceonline.com/corporate-intelligence_corridors-ofpower/2020/06/24/belltrox-affair-scares-corporate-intelligence-world,109240236gra.

  27. US Attorney’s Office, Southern District of New York, “Israeli Hacker-for-Hire Sentenced to 80 Months in Prison for Involvement in Massive Spearphishing Campaign,” press release, November 16, 2023, https://www.justice.gov/usao-sdny/pr/israeli-hacker-hire-sentenced-80-months-prison-involvement-massive-spearphishing (archive: perma.cc/W2YB-J3XJ ); Joe Miller, “Wirecard Hacker Sentenced to 80 Months in Prison,”inancial Times, November 16, 2023, https://www.ft.com/content/5557859d-6eb8-4ccd-a78f-ec252f4e64ac (archive: perma.cc/BRH8-2D8Z).

  28. Sam Tobin, “Israeli Private Eye Arrested in London over Alleged Hacking for US Firm,” Reuters, May 2, 2024, https://www.reuters.com/world/israeli-private-eyearrested-uk-over-alleged-hacking-us-pr-firm-2024-05-02/.

  29. Raphael Satter and Christopher Bing, “Israeli Private Eye Accused of Hacking Was Questioned about DC Public Affairs Firm, Sources Say,” Reuters, May 24, 2024, https://www.reuters.com/world/israeli-private-eye-accused-hacking-was-questionedabout-dc-public-affairs-firm-2024-05-24/ ; Christopher M. Matthews, BradleyHope, and Jenny Strasburg, “U.S. Prosecutors Probe Global Hacking-for-Hire Operation,” Wall Street Journal, June 4, 2024, https://www.wsj.com/business/u-sprosecutors-probe-global-hacking-for-hire-operation-75ab73e7.

  30. Shaun Waterman, “CIA Spying on Assange ‘Illegally’ Swept Up US Lawyers, Journalists: Lawsuit,” Newsweek, August 15, 2022, https://www.newsweek.com/ciaspying-assange-illegally-swept-us-lawyers-journalists-lawsuit-1731570 (archive: perma.cc/2Y77-Q2KY).

  31. Waterman, “CIA Spying on Assange.”

  32. José María Irujo, “Spanish Company That Spied on Assange Allegedly Informed CIA about Meetings Held by Latin American Leaders,” El País, July 18, 2023, https://english.elpais.com/international/2023-07-18/spanish-company-that-spied-on-assange-allegedly-informed-cia-about-meetings-held-by-latin-american-leaders.html (archive: perma.cc/7X74-PMHV ); José María Irujo, “A Spanish Company and the CIA Found Guilty of Violating Rights of Julian Assange’s Visitors,” El País, December 22, 2023, https://english.elpais.com/international/2023-12-22/a-spanish-company-and-the-ciafound-guilty-of-violating-rights-of-julian-assanges-visitors.html . Charges are still pending at the time of writing.

  33. Leo Eiholzer and Andreas Schmid, “‘Project Merciless’: How Qatar Spied on the World of Football in Switzerland,” SWI Swissinfo.ch (archive: perma.cc/4JMX-K8MS ), November 2, 2022, www.wissinfo.ch/eng/business/project-merciless-how-qatar-spied-on-the-world-offootball-in-switzerland/48022952.

  34. Leo Eiholzer, “Qatar Bugged Secret Meeting between Swiss Attorney General and FIFA President Infantino,” Neue Zürcher Zeitung, March 11, 2023, https://www.nzz.ch/english/qatar-wiretapped-federal-prosecutor-and-fifa-president-infantino-ld.1730044 (archive: perma.cc/TW4X-VUXB); Graham Dunbar, “Qatar Spied on Swiss Prosecutor, FIFA Boss Meeting,” Associated Press, March 12, 2023, https://apnews.com/article/soccer-fifa-qatar-spying-cia-world-cup-eef4838300a9f014acdcee0c38020d9f (archive: perma.cc/RD9K-85GG).

  35. Alan Suderman, “FBI Probing Ex-CIA Officer’s Spying for World Cup Host Qatar,” Associated Press, October 27, 2022, https://apnews.com/article/world-cup-technology-sports-soccer-religion-5af544d34cded38ff4093587d2efa0de (archive: perma.cc/PW93-XUYC).

  36. Eiholzer and Schmid, “‘Project Merciless.’”

  37. David D. Kirkpatrick, “A Confession Exposes India’s Secret Hacking Industry,” New Yorker, June 1, 2023, https://www.newyorker.com/news/annals-of-crime/a-confession-exposes-indias-secret-hacking-industry (archive: perma.cc/6YDH-UWAB).

  38. Raphael Satter and Christopher Bing, “How Mercenary Hackers Sway Litiga- tion Battles,” Reuters, June 30, 2022, https://www.reuters.com/investigates/specialreport/usa-hackers-litigation/.

  39. Christopher Bing and Raphael Satter, “How an Indian Startup Hacked the World,” Reuters, November 16, 2023, https://www.reuters.com/investigates/special-reportusa-hackers-appin/.

  40. Lachlan Cartwright, “Who Is Killing All These Stories about a Controversial Tech Mogul?,” Daily Beast, December 18, 2023, https://www.thedailybeast.com/who-is-killing-all-these-stories-about-rajat-khare-controversial-tech-mogul (archive: perma.cc/YR3F-YD4G).

  41. Lachlan Cartwright, “#MeToo ‘Media Assassins’ Clare Locke Still Repping Russian Oligarchs,” Daily Beast, March 15, 2022, https://www.thedailybeast.com/metoomedia-assassins-clare-locke-still-repping-russian-oligarchs.

  42. Ronald Deibert, “Jail Time for Private Detective,” Ronald Deibert, November 22, 2023, https://deibert.citizenlab.ca/2023/11/jail-time-for-private-detective/ (archive: perma.cc/RTF4-FNT9).

  43. Ronen Bergman and Scott Shane, “The Case of the Bumbling Spy: A Watchdog Group Gets Him on Camera,” New York Times, January 28, 2019, https://www.nytimes.com/2019/01/28/world/black-cube-nso-citizen-lab-intelligence.html ; Raphael Satter, “Undercover Spy Exposed in NYC Was 1 of Many,” Associated Press, February 11, 2019, https://apnews.com/general-news-9bdbbfe0c8a2407aac14a1e995659de4 (archive: perma.cc/7YTK-DKCJ).

  44. “Darryl Levitt’s Court Filing,” Associated Press, February 21, 2019, https://www.documentcloud.org/documents/5750598-Darryl-Levitt-s-Court-Filing (archive: perma.cc/6SN4-ZPHG).

  45. Satter, “Undercover Spy Exposed in NYC.”

  46. Ronan Farrow, “The Black Cube Chronicles: The Private Investigators,” New Yorker, October 7, 2019, https://www.newyorker.com/news/annals-of-espionage/the-black-cube-chronicles-the-private-investigators (archive: perma.cc/CT7U-2XGE).

  47. Ronan Farrow, “How Democracies Spy on Their Citizens,” New Yorker, April 18, 2022, https://www.newyorker.com/magazine/2022/04/25/how-democracies-spy-on-their-citizens (archive: perma.cc/HL54-QF7S).

  48. Stephanie Kirchgaessner and Harry Davies, “Private Equity Executive Sought to Undermine NSO Critics, Data Suggests,” Guardian, April 28, 2022, https:/www.theguardian.com/world/2022/apr/28/private-equity-executive-sought-toundermine-nso-critics-data-suggests.

  49. Bill Curry and Colin Freeze, “Ties to ‘Harmful’ Spyware Company Bring Crit- icism of Ottawa Adviser on Internet Regulation,” Globe and Mail, May 10, 2022, https://www.theglobeandmail.com/politics/article-ottawa-internet-regulation-expert-nso-group-spyware/ (archive: perma.cc/B9CE-D4KP).

  50. Kirchgaessner and Davies, “Private Equity Executive Sought to Undermine.”

CHAPTER 7: “TRUST NO ONE”

  1. “Hydroacoustic Monitoring,” CTBTO Preparatory Commission, accessed March 6, 2024, https://www.ctbto.org/our-work/monitoring-technologies/hydroacoustic-monitoring (archive: perma.cc/VB9E-ZGLZ ); “Infrasound Monitoring,” CTBTO Preparatory Commission, accessed March 6, 2024, https://www.ctbto.org/our-work/monitoring-technologies/infrasound-monitoring (archive: perma.cc/WZN3-96VM ); “Radionuclide Monitoring,” CTBTO Preparatory Commission, accessed March 6, 2024, https://www.ctbto.org/our-work/monitoring-technologies/radionuclide-monitoring (archive: perma.cc/XZK8-66WL).

  2. Wawrzyniec Muszyn´ski-Sulima, “Cold War in Space: Reconnaissance Satellites and US-Soviet Security Competition,” European Journal of American Studies 18, no. 2 (Summer 2023): https://doi.org/10.4000/ejas.20427 (archive: perma.cc/NCU2-Z25A ); David Zikusoka, “Spying from Space,” Foreign Affairs, February 2, 2024, https://www.foreignaffairs.com/unitedstates/spying-space ; Jeffrey T. Richelson, “Scientists in Black,” Scientific American, February 1998, 48–55; Jeffrey T. Richelson and Danielle Gordon, “High Flyin’ Spies,” Bulletin of the Atomic Scientists 52, no. 5 (1996): 48–54; Ronald J. Deibert, “Unfettered Observation: The Politics of Earth Monitoring from Space,” in Space Policy in the Twenty-First Century, ed. W. Henry Lambright (Baltimore, MD: Johns Hopkins University Press, 2003), 89–114.

  3. Wilfred P. Deac, “The Navy’s Spy Missions in Space,” Naval History, April 2008, https://www.usni.org/magazines/naval-history-magazine/2008/april/navys-spymissions-space.

  4. Kelsey Herndon, Franz Meyer, Africa Flores, Emil Cherrington, and Leah Kucera, “What Is Synthetic Aperture Radar?,” Earthdata, https://www.earthdata.nasa.gov/learn/backgrounders/what-is-sar.

  5. “RADARSAT Program,” Government of Canada, updated October 18, 2023, https://www.asc-csa.gc.ca/eng/satellites/service-desk/radarsat-program.asp (archive: perma.cc/F82R-5VY4).

  6. Eliot Higgins, “How Open Source Evidence Was Upheld in a Human Rights Court,” Bellingcat, March 28, 2023, https://www.bellingcat.com/resources/2023/03/28/how-open-source-evidence-was-upheld-in-a-human-rights-court/ (archive: perma.cc/FL4L-EUY5 ); Eliot Higgins, “The Open Source Hunt for Syria’s Favourite Sarin Bomb,” Bellingcat, April 21, 2020, https://www.bellingcat.com/news/2020/04/21/the-open-source-hunt-for-syrias-favourite-sarin-bomb/ (archive: perma.cc/2EU4-8ECM ); Christo Grozev, “The Remote Control Killers behind Russia’s Cruise Missile Strikes on Ukraine,” Bellingcat, October 24, 2022, https:// www.bellingcat.com/news/uk-and-europe/2022/10/24/the-remote-control-killersbehind-russias-cruise-missile-strikes-on-ukraine/.

  7. “The International Monitoring System,” CTBTO Preparatory Commission, accessed March 8, 2024, https://www.ctbto.org/our-work/international-monitoringsystem; “International Monitoring System Map,” CTBTO Preparatory Commission, accessed March 8, 2024, https://www.ctbto.org/our-work/ims-map (archive: perma.cc/Y9ZR-UA3X).

  8. John Keess, “Strategic Parasitism, Professional Strategists and Policy Choices: The Influence of George Lindsey and Robert Sutherland on Canadian Denuclearisation, 1962–1972,” Canadian Military History 29, no. 1 (2020): https://scholars.wlu.ca/cgi/viewcontent.cgi?article=2015&context=cmh.

  9. Charles Tilly, “War Making and State Making as Organized Crime,” in Bringing the State Back In, ed. Dietrich Rueschemeyer, Peter B. Evans, and Theda Skocpol (Cambridge: Cambridge University Press, 1985), 169–91, https://doi.org/10.1017/CBO9780511628283.008 (archive: perma.cc/LY5K-9YT5).

  10. James Cox, “Canada and the Five Eyes Intelligence Community,” Strategic Studies Working Group Papers, Canadian Defence & Foreign Affairs Institute and Canadian International Council, December 2012, https://web.archiveorg/web/20150910204519/ http://www.cdfai.org.previewmysite.com/PDFCanada%20and%20the%20Five%20Eyes%20Intelligence%20Community.pdf.

  11. “The X-Files: Filming & Production,” IMDb, accessed March 8, 2024, https://www.imdb.com/title/tt0106179/locations/ (archive: perma.cc/6Q5P-EXNA ).

CHAPTER 8: SURVEILLANCE SPECIALISTS

  1. Jonathan Peterson, “Where in the World Is Kobi Alexander?,” Baltimore Sun, August 26, 2006, https://www.baltimoresun.com/2006/08/26/where-in-the-world-is-kobi-alexander/ (archive: perma.cc/87S4-JASJ).

  2. Paul E. Ceruzzi, “The Chip and Its Impact, 1965–1975,” in A History of Modern Computing (Cambridge, MA: MIT Press, 1998), 177–206; Chris Miller, Chip War: The Fight for the World’s Most Critical Technology (New York: Scribner, 2022).

  3. Ernest Holsendolph, “U.S. Settles Phone Suit, Drops I.B.M. Case; A.T.& T. to Split Up, Transforming Industry,” New York Times, January 9, 1982, https://www.nytimes.com/1982/01/09/us/us-settles-phone-suit-drops-ibm-case-at-t-to-splitup-transforming-industry.html.

  4. “A Brief History of NSF and the Internet,” US National Science Foundation, August 13, 2003, https://www.nsf.gov/news/news_summ.jsp?cntn_id=103050 (archive: perma.cc/G4WM-VLSX).

  5. “Telecommunications Act of 1996,” Federal Communications Commission, June 20, 2013, https://www.fcc.gov/general/telecommunications-act-1996 (archive: perma.cc/7V6L-TRZR).

  6. John Labate, “Companies to Watch,” Fortune, May 17, 1993, https://money.cnn.commagazines/fortune/fortune_archive/1993/05/17/77847/index.htm.

  7. “Tapping into Fax and Modem Links,” Intelligence Online, March 15, 1995, https://www.intelligenceonline.com/technology/1995/03/15/tapping-into-fax-andmodem-links,65292-art.

  8. Labate, “Companies to Watch.”

  9. “Tapping into Fax and Modem Links.”

  10. Brian Hochman, “How the Drug War Convinced America to Wiretap the Digital Revolution,” Humanities, Winter 2023, https://www.neh.gov/article/how-drug-war-convinced-america-wiretap-digital-revolution (archive: perma.cc/7HFW-8JBF).

  11. Dave Banisar, “CPSR Alert 2.05,” CPSR Alert, November 12, 1993, https://cypher punks.venona.com/date/1993/11/msg00462.html.

  12. Susan Landau, “National Security on the Line,” Journal on Telecommunications and High Technology Law 4, no. 2 (Spring 2006): 409–47.

  13. Greg Walton, China’s Golden Shield: Corporations and the Development of Surveillance Technology in the People’s Republic of China, Rights & Democracy, International Centre for Human Rights and Democratic Development, 2001, https://publications.gc.ca/collections/Collection/E84-7-2001E.pdf.

  14. “FAQ on the CALEA Expansion by the FCC,” Electronic Frontier Foundation, https://www.eff.org/pages/calea-faq (archive: perma.cc/L2HU-DAWB).

  15. John Markoff, “F.B.I. Seeks Access to Mobile Phone Locations,” New York Times, July 17, 1998, https://www.nytimes.com/1998/07/17/us/fbi-seeks-access-to-mobilephone-locations.html.

  16. Hochman, “How the Drug War Convinced America.”

  17. Christopher Ketcham, “An Israeli Trojan Horse,” CounterPunch, September 27, 2008, https://www.counterpunch.org/2008/09/27/an-israeli-trojan-horse/ (archive: perma.cc/USP9-23ZM).

  18. Office of the Inspector General, The Implementation of the Communications Assistance for Law Enforcement Act, Audit Report 06-13, US Department of Justice, March 2006, https://oig.justice.gov/reports/FBI/a0613/findings.htm (archive: perma.cc/B6ER-KHDH).

  19. John Markoff, “Cellular Phone Groups to Sue Over Wiretapping Regulations,” New York Times, April 24, 1998, https://www.nytimes.com/1998/04/24/business/cellularphone-groups-to-sue-over-wiretapping-regulations.html; Office of the Inspector General, The Implementation of the Communications Assistance for Law Enforcement Act by the Federal Bureau of Investigation, Audit Report 08-20, US Department of Justice, March 2008, https://oig.justice.gov/reports/FBI/a0820/final.pdf (archive: perma.cc/87QY-WRCD); Susan Landau, “If We Build It (They Will Break In),” Lawfare, February 28, 2020, https://www.lawfaremedia.org/article/if-we-build-it-they-will-break.

  20. “Tapping into Fax and Modem Links.”

  21. Verint Systems Inc., Form 10-K, US Securities and Exchange Commission, April 30, 2003, https://www.sec.gov/Archives/edgar/data/1166388/000115752303001569/a4383530.txt (archive: perma.cc/URP5-QBBG).

  22. Comverse Technology Inc., Form 10-K, US Securities and Exchange Commission, March 15, 1996, https://www.sec.gov/Archives/edgar/data/803014/0000950130-96-001018.txt (archive: perma.cc/59EP-P22W).

  23. Simon Clark, “U.S. Software Firm Verint Is in Talks to Buy NSO for about $1 Billion,” Wall Street Journal, May 28, 2018, https://www.wsj.com/articles/u-ssoftware-firm-verint-systems-is-in-talks-to-buy-nso-group-for-about-1-billion1527491415.

  24. “NICE Marks 20th Anniversary,” Nice News, March 2006, https://web.archive.org/web/20071022204124/http://www.nice.com/news/newsletter/6_03s/anniversaryphp; “Executive Profile: Ori Cohen,” Businessweek, October 15, 2012, https:// web.archive.org/web/20121015214857/http://investing.businessweek.com/researchstocks/private/person.asp?personId=1635969&privcapId=29785875&previous CapId=22903&previousTitle=Sequoia%20Capital.

  25. “Boeing to Acquire Narus,” Tech Monitor, July 8, 2010, https://techmonitor.ai/technology/software/boeing-to-acquire-narus_080710.

  26. James Bamford, The Shadow Factory: The Ultra-Secret NSA from 9/11 to the Eavesdrop- ping on America (New York: Anchor Books, 2009).

  27. Bamford, Shadow Factory.

  28. Bamford, Shadow Factory.

  29. Sari Horwitz,“Israeli ExpertsTeach Police onTerrorism,”Washington Post,June 11,2005, https://www.washingtonpost.com/archive/local/2005/06/12/israeli-experts-teachpolice-on-terrorism/8cc7830c-df28-4ac1-8bfb-17bc0d3fda28/.

  30. Bamford, Shadow Factory.

  31. Labate, “Companies to Watch.”

  32. Bamford, Shadow Factory.

  33. “Tower’s Top Executives to Step Down,” EE Times, March 4, 2003, https://www.etimes.com/towers-top-executives-to-step-down/.

  34. Richard Sanders, “Israeli Spy Companies: Verint and Narus,” Press for Conversion!, Spring 2012, https://coat.ncf.ca/P4C/66/spy.pdf (archive: perma.cc/FH8Z-8GEU); Nicky Blackburn, “Israeli Voice Veri- fication Keeps Track of Visa Holders to US,” Israel21c, December 11, 2005, https://www.srael21c.org/israeli-voice-verification-keeps-track-of-visa-holders-to-us/.

  35. Blackburn, “Israeli Voice Verification Keeps Track.”

  36. Russell A. Stone, Eliahu Elath, William L. Ochsenwald, and Harvey Sicherman, “Israel,” Encyclopedia Britannica, updated August 2, 2024, https://www.britannica.com/place/Israel; Tom Segev, A State at Any Cost: The Life of David Ben-GurionNew York: Farrar, Straus and Giroux, 2019).

  37. Ephraim Kahana, “Reorganizing Israel’s Intelligence Community,” International Journal of Intelligence and CounterIntelligence 15, no. 3 (2002): 415–28, https://doi.org/10.1080/08850600290101686.

  38. John Reed, “Unit 8200: Israel’s Cyber Spy Agency,” Financial Times, July 10, 2015, https://www.ft.com/content/69f150da-25b8-11e5-bd83-71cb60e8f08c.

  39. Gerald Estrin, “The WEIZAC Years (1954–1963),” Annals of the History of Computing 13, no. 4 (October–December 1991): 317–39, https://doi.org/10.1109/MAHC.1991.10037 (archive: perma.cc/NA32-LJAN).

  40. Reed, “Unit 8200.”

  41. Gil Press, “6 Reasons Israel Became a Cybersecurity Powerhouse Leading the82 Billion Industry,” Forbes, July 18, 2017, https://www.forbes.com/sites/gilpress/2017/07/18/6-reasons-israel-became-a-cybersecurity-powerhouse-leading-the-82-billion-industry/ (archive: perma.cc/56U9-94LG).

  42. Yair Evron, “French Arms Policy in the Middle East,” World Today 26, no. 2 (February 1970): 82–90.

  43. Itai Shapira, “The Yom Kippur Intelligence Failure after Fifty Years: What Lessons Can Be Learned?,” Intelligence and National Security 38, no. 6 (2023): 978–1002, https://doi.org/10.1080/02684527.2023.2235795.

  44. Eric Sof, “Sayeret Matkal: A Israel’s Equivalent to the Delta Force,” Spec Ops Maga- zine, May 15, 2013, https://special-ops.org/sayeret-matkal/ (archive: perma.cc/6KL8-SRD3).

  45. Reed, “Unit 8200.”

  46. Dan Senor and Saul Singer, Start-up Nation: The Story of Israel’s Economic MiracleToronto: McClelland & Stewart, 2011).

  47. Press, “6 Reasons Israel Became a Cybersecurity Powerhouse.”

  48. Catherine de Fontenay and Erran Carmel, “Israel’s Silicon Wadi: The Forces behind Cluster Formation,” SIEPR Discussion Paper No. 00-40, Stanford Institute for Economic Policy Research, June 2001, https://drive.google.com/file/d/1QU-BxZBAjZq_64KztKY0m8QQG4IYYzBB/view (archive: perma.cc/5HD8-NEEY).

  49. “The Unit,” Forbes, February 8, 2007, https://www.forbes.com/2007/02/07/israel-military-unit-ventures-biz-cx_gk_0208israel.html (archive: perma.cc/VSE9-CQCC).

  50. Amos Barshad, “Inside Israel’s Lucrative—and Secretive—Cybersurveillance Industry,” Rest of World, March 9, 2021, https://restofworld.org/2021/inside-israels-lucrative-and-secretive-cybersurveillance-talent-pipeline/ (archive: perma.cc/7VT5-EP3V).

  51. Eitay Mack, “A Deep Dive into Shady Nexus between Israel Foreign Ministry and Private Firms,” Wire, July 27, 2023, https://thewire.in/world/leaked-diplomaticcables-reveal-shady-nexus-between-israel-foreign-ministry-and-private-firms (archive: perma.cc/EE9Z-2WDF); Eitay Mack, “How Israel Helped Prop Up Rwanda’s Hutu Regime before the Geno- cide,” +972 Magazine, April 29, 2019, https://www.972mag.com/rwanda-genocidehutu-israel/.

  52. Hagar Shezaf and Jonathan Jacobson, “Revealed: Israel’s Cyber-Spy Industry Helps World Dictators Hunt Dissidents and Gays,” Haaretz, October 20, 2018, https://www.haaretz.com/israel-news/2018-10-20/ty-article-magazine/.premium/israels-cyber-spy-industry-aids-dictators-hunt-dissidents-and-gays/0000017f-e9a9-dc91-a17f-fdadde240000 (archive: perma.cc/6X4X-7U4C).

  53. Alexandra Konn, “Israel’s Information Control Regime in the Occupied Palestinian Territories,” Organization for World Peace, June 7, 2021, https://theowp.org/reports/israels-information-control-regime-in-the-occupied-palestinianterritories/.

  54. Antony Loewenstein, The Palestine Laboratory: How Israel Exports the Technology of Occupation around the World (London: Verso Books, 2023).

  55. Reed, “Unit 8200.”

  56. Loewenstein, Palestine Laboratory.

  57. Loewenstein, Palestine Laboratory.

  58. Julie Creswell, “At Comverse, Many Smart Business Moves and Maybe a Bad One,” New York Times, August 21, 2006, https://www.nytimes.com/2006/08/21/technology21options.html.

  59. Kevin Dugan, “A Decade on the Lam, Ex-Comverse CEO to Return to US,” New York Post, August 22, 2016, https://nypost.com/2016/08/22/a-decade-on-the-lam-ex-comverse-ceo-to-return-to-us/ (archive: perma.cc/Y2XV-DZ8Q).

  60. Dugan, “Decade on the Lam.”

  61. Dugan, “Decade on the Lam.”

  62. “Verint Delisted from NASDAQ,” Security Systems News, March 1, 2007, https://www.securitysystemsnews.com/article/verint-delisted-nasdaq (archive: perma.cc/C9B2-29JU).

  63. “Verint to Buy Comverse Technology,” Reuters, August 13, 2012, https://www.reuters.com/article/idUSBRE87C10F/.

CHAPTER 9: CLOSE CALLS IN GUATEMALA CITY

  1. Brett Forester, “‘You’re Not Alone’: Guatemalan Anthropologist Offers Support for Unmarked Graves Searches,” CBC News, March 5, 2023, https://www.cbc.ca/news/indigenous/fafg-peccerelli-guatemala-unmarked-graves-1.6765949 (archive: perma.cc/3RUC-YK2D).

  2. “Guatemala,” New York Times, July 15, 2004, https://www.nytimes.com/2004/07/15travel/guatemala.html.

  3. “Guatemala Murder/Homicide Rate 1960–2024,” Macrotrends, accessed March 20, 2024, https://www.macrotrends.net/global-metrics/countries/GTM/guatemala/murder-homicide-rate (archive: perma.cc/KRE9-CMBT).

  4. “Justice in Guatemala,” Center for Justice and Accountability, accessed March 20, 2024, https://cja.org/where-we-work/guatemala/related-resources/general-rios-montt-trial-in-guatemala-2/justice-in-guatemala/ (archive: perma.cc/VZV4-39S7).

  5. “Uncovering the Truth: The Guatemalan Forensic Anthropology Foundation,” Amnesty International, September 9, 2008, https://www.amnesty.org/en/documents/amr34/019/2008/en/ (archive: perma.cc/9ZSG-Z86M).

  6. Leslie H. Gelb, “Israelis Said to Step Up Role as Arms Suppliers to Latins,” New York Times, December 17, 1982, https://www.nytimes.com/1982/12/17/worldisraelis-said-to-step-up-role-as-arms-suppliers-to-latins.html.

  7. Cheryl Rubenberg, “Israel and Guatemala,” Middle East Report, May/June 1986, https://merip.org/1986/05/israel-and-guatemala/ (archive: perma.cc/AVJ8-JJAD).

  8. Rubenberg, “Israel and Guatemala.”

  9. Rubenberg, “Israel and Guatemala.”

  10. Rubenberg, “Israel and Guatemala.”

  11. Guatemala: A Government Program of Political Murder, Amnesty International, 1981, https://www.amnesty.org/en/wp-content/uploads/2021/06/amr340021981en.pdf (archive: perma.cc/3AWF-2MEL).

  12. Rubenberg, “Israel and Guatemala.”

  13. Rubenberg, “Israel and Guatemala.”

  14. Rubenberg, “Israel and Guatemala.”

  15. Edward Cody, “El Salvador, Israel Set Closer Ties,” Washington Post, August 16, 1983, https://www.washingtonpost.com/archive/politics/1983/08/17/el-salvador-israel-setcloser-ties/f36aa9a5-2f69-488f-afd1-771dd1eb866b/.

  16. Rubenberg, “Israel and Guatemala.”

  17. Guatemala: Memory of Silence, Commission for Historical Clarification, 1999, https://hrdag.org/wp-content/uploads/2013/01/CEHreport-english.pdf (archive: perma.cc/8RQE-4LX9).

  18. Bishara Bahbah with Linda Butler, “Israel and Latin America,” in Israel and Latin America: The Military Connection (London: Palgrave Macmillan, 1986), 59–109, https://doi.org/10.1007/978-1-349-09193-5_3 (archive: perma.cc/BKV9-E7QY).

  19. Jennifer Schirmer, “A Violence Called Democracy,” ReVista, Fall 2003, https://revista.drclas.harvard.edu/a-violence-called-democracy/ (archive: perma.cc/FHQ3-PTGF).

  20. “Legitimacy on the Line: Human Rights and the 2003 Guatemalan Elections,” Amnesty International, September 18, 2003, https://www.amnesty.org/en/documents/amr34/051/2003/en/ (archive: perma.cc/PV7R-SJ7P).

  21. “Legitimacy on the Line.”

  22. “Legitimacy on the Line.”

  23. “Espionaje ilegal del Gobierno: Aquí está la investigación de Nuestro Diario (Parte I),” Nómada, August 6, 2018, https://nomada.gt/pais/la-corrupcion-no-es-normalespionaje-ilegal-del-gobierno-aqui-esta-la-investigacion-de-nuestro-diario-partei/ (archive: perma.cc/5QNK-WG9Y); Lee Fang, “Former AK-47 Dealer Goes Cyber, Supplied Surveillance Tools to Honduras Government,” Intercept, July 27, 2015, https://theintercept.com2015/07/27/ak-47-arms-dealer-goes-cyber-supplied-surveillance-tools-hondurasgovernment/; Report of the General Secretariat of the Organization of American States on the Diversion of Nicaraguan Arms to the United Self Defense Forces of Colombia, Orga- nization of American States, January 6, 2003, https://www.oas.org/OASpage/NICOarmas/NI-COEnglish3687.htm.

  24. Fang, “Former AK-47 Dealer Goes Cyber.”

CHAPTER 10: “SO, YOU ARE PAID BY THE AGA KHAN?”

  1. Information Warfare Monitor, Tracking GhostNet: Investigating a Cyber Espionage Network, Munk School of Global Affairs, University of Toronto, March 29, 2009, https://citizenlab.ca/wp-content/uploads/2017/05/ghostnet.pdf (archive: perma.cc/6F7C-X9ZY); Information Warfare Monitor and Shadowserver Foundation, Shadows in the Cloud: Investigating Cyber Espi- onage 2.0, Munk School of Global Affairs, University of Toronto, April 6, 2010, https:/citizenlab.ca/wp-content/uploads/2017/05/shadows-in-the-cloud.pdf.

  2. John Markoff and David Barboza, “Researchers Trace Data Theft to Intruders in China,” New York Times, April 5, 2010, https://www.nytimes.com/2010/04/06science/06cyber.html.

  3. Thomas Vinciguerra, “The Revolution Will Be Colorized,” New York Times, March 13, 2005, https://www.nytimes.com/2005/03/13/weekinreview/the-revolution-willbe-colorized.html.

  4. Tim Eaton, “Internet Activism and the Egyptian Uprisings: Transforming Online Dissent into the Offline World,” Westminster Papers in Communication and Culture 9, no. 2 (2013): 3–24, https://doi.org/10.16997/wpcc.163.

  5. Larry Diamond, “Liberation Technology,” Journal of Democracy 21, no. 3 (July 2010):

  6. 69–83, https://doi.org/10.1353/jod.0.0190 (archive: perma.cc/BV2M-WNHS).

  7. “Are They Allowed to Do That? A Breakdown of Selected Government Surveillance Programs,” Brennan Center for Justice, July 15, 2013, https://www.brennancenter.org/our-work/research-reports/are-they-allowed-do-breakdown-selectedgovernment-surveillance-programs.

  8. “National Security Letters: FAQ,” Electronic Frontier Foundation, https://www.eff.org/issues/national-security-letters/faq.

  9. T. C. Sottek and Janus Kopfstein, “Everything You Need to Know about PRISM,”erge, July 17, 2013, https://www.theverge.com/2013/7/17/4517480/nsa-spyingprism-surveillance-cheat-sheet (archive: perma.cc/FBB8-J87N).

  10. Steven Loleski, “From Cold to Cyber Warriors: The Origins and Expansion of NSA’s Tailored Access Operations (TAO) to Shadow Brokers,” Intelligence and National Security 34, no. 1 (January 2, 2019): 112–28, https://doi.org/10.108002684527.2018.1532627.

  11. Mark Klein, interview by Frontline, season 25, episode 8, “Spying on the Home- front,” aired May 15, 2007, on PBS, https://www.pbs.org/wgbh/pages/frontline/homefront/interviews/klein.html (archive: perma.cc/R7FF-SACQ).

  12. Glenn Greenwald, Ewen MacAskill, and Laura Poitras, “Edward Snowden: The Whistleblower behind the NSA Surveillance Revelations,” Guardian, June 11, 2013, https://www.theguardian.com/world/2013/jun/09/edward-snowden-nsa-whistle blower-surveillance; Barton Gellman, Dark Mirror: Edward Snowden and the Amer- ican Surveillance State (New York: Penguin Books, 2021).

  13. Jedidiah R. Crandall, Masashi Crete-Nishihata, Jeffrey Knockel, Sarah McKune, Adam Senft, Diana Tseng, and Greg Wiseman, “Chat Program Censorship and Surveillance in China: Tracking TOM-Skype and Sina UC,” First Monday 18, no. 7 (2013): https://doi.org/10.5210/fm.v18i7.4628 (archive: perma.cc/FJ9C-LLGY); Nart Villeneuve, Breaching Trust: An Analysis of Surveillance and Security Practices on China’s TOM-Skype Platform, Information Warfare Monitor and Citizen Lab, Munk School of Global Affairs, University of Toronto, October 1, 2008, https://www.nartv.org/mirror/breachingtrust.pdf (archive: perma.cc/D9RW-VQQR).

  14. See Ronald Deibert, John Palfrey, Rafal Rohozinski, and Jonathan L. Zittrain, eds., Access Denied: The Practice and Policy of Global Internet Filtering (Cambridge, MA: MIT Press, 2008), https://doi.org/10.7551/mitpress/7617.001.0001.

  15. Jonathon Penney, Sarah McKune, Lex Gill, and Ronald J. Deibert, “Advancing Human-Rights-by-Design in the Dual-Use Technology Industry,” Journal of Inter- national Affairs 71, no. 2 (2018): 103–10; Ronald Deibert, “What to Do about ‘Dual Use’ Digital Technologies?,” Ronald Deibert, November 29, 2016, https://deibert.citizenlab.ca/2016/11/dual-use/; Siena Anstis, Niamh Leonard, and Jonathon W. Penney, “Moving from Secrecy to Transparency in the Offensive Cyber Capabili- ties Sector: The Case of Dual-Use Technologies Exports,” Computer Law & Security Review 48 (April 2023): 105787, https://doi.org/10.1016/j.clsr.2022.105787 (archive: perma.cc/7YMN-R2HZ).

  16. Greg Walton, China’s Golden Shield: Corporations and the Development of Surveillance Technology in the People’s Republic of China, Rights & Democracy, International Centre for Human Rights and Democratic Development, 2001, https://publications.gc.ca/collections/Collection/E84-7-2001E.pdf.

  17. Jim Yardley, “Two Concerns for Olympics: Air and Access,” New York Times, July 9, 2008, https://www.nytimes.com/2008/07/09/sports/olympics/09beijing.html.

  18. Ryan Singel, “Espionage against Pro-Tibet Groups, Others, Spurred Microsoft Patches,” Wired, April 10, 2008, https://www.wired.com/2008/04/espionage-against-pro-tibet-groups-others-spurred-microsoft-patches/ (archive: perma.cc/6RMT-9T9U); Maarten Van Horenbeeck, “Overview of Cyber Attacks against Tibetan Communities,” Internet Storm Center, SANS Technology Institute, March 24, 2008, https://isc.sans.edu/diaryOverview+of+cyber+attacks+against+Tibetan+communities/4177/.

  19. John Markoff, “Tracking Cyberspies through the Web Wilderness,” New York Times, May 11, 2009, https://www.nytimes.com/2009/05/12/science/12cyber.html.

  20. Omar El Akkad, “Meet the Canadians Who Busted GhostNet,” Globe and Mail, March 30, 2009, https://www.theglobeandmail.com/technology/meet-the-canadians-who-busted-ghostnet/article1214210/ (archive: perma.cc/J95N-9QCN).

  21. Information Warfare Monitor and Shadowserver Foundation, Shadows in the Cloud.

  22. Markoff and Barboza, “Researchers Trace Data Theft.”

  23. “A New Approach to China,” Google Official Blog, January 12, 2010, https://googleblog.blogspot.com/2010/01/new-approach-to-china.html (archive: perma.cc/59NX-YQ7V).

  24. Christopher Parsons, “CSE Summaries,” Technology, Thoughts & Trinkets (blog), updated January 17, 2023, https://christopher-parsons.com/resources/the-sigint-sum (archive: perma.cc/48GF-438F) maries/cse-summaries/.

  25. Brigitte Bureau, “Stephen Harper Involved in Company Looking to Arrange Sale of Surveillance Tech to UAE,” CBC News, September 29, 2021, https://www.cbc.canews/politics/harper-united-arab-emirates-surveillance-technology-1.6192281.

  26. TED Blog Video, “Shyam Sankar: Who Hacked the Dalai Lama’s Email? TED BLOG EXCLUSIVE,” September 6, 2012, video, 3:38, https://www.youtube.comwatch?v=zE6xvQeMqqE.

  27. Ronen Bergman, “Weaving a Cyber Web,” Ynetnews, January 11, 2019, https://www.ynetnews.com/articles/0,7340,L-5444998,00.html (archive: perma.cc/3NGP-GDPQ).

  28. Bergman, “Weaving a Cyber Web.”

  29. Hagar Shezaf and Jonathan Jacobson, “Revealed: Israel’s Cyber-Spy Industry Helps World Dictators Hunt Dissidents and Gays,” Haaretz, October 20, 2018, https://www.haaretz.com/israel-news/2018-10-20/ty-article-magazine/.premium/israels-cyber-spy-industry-aids-dictators-hunt-dissidents-and-gays/0000017f-e9a9-dc91-a17f-fdadde240000 (archive: perma.cc/6X4X-7U4C).

  30. Shezaf and Jacobson, “Revealed: Israel’s Cyber-Spy Industry.”

CHAPTER 11: “MÁTALO! MÁTALO!”

  1. Jon Lee Anderson, “Mexican Journalists Lose Another Colleague to the Drug War,”ew Yorker, May 20, 2017, https://www.newyorker.com/news/news-desk/mexicanjournalists-lose-another-colleague-to-the-drug-war; Ioan Grillo, “Inside the Brilliant Career and Tragic Death of Javier Valdez,” Esquire, September 19, 2018, https://www.esquire.com/news-politics/a22996658/javier-valdez-luis-guzman-elchapo-journalist/ (archive: perma.cc/7VRX-2SRM).

  2. Center for Preventive Action, “Criminal Violence in Mexico,” Global ConflictTracker, updated July 24, 2024, https://cfr.org/global-conflict-tracker/conflict/criminal-violence-mexico (archive: perma.cc/ESS8-GMS5).

  3. Anderson, “Mexican Journalists Lose Another Colleague.”

  4. Leónidas Alfaro Bedolla, “¿QUIÉN MATÓ A JAVIER VALDEZ? Capítulo No. 9: Una Infamia Imperdonable,” Espejo, January 22, 2023, https://web.archive.orgweb/20230202214916/https://revistaespejo.com/reflexiones/quien-mato-a-javiervaldez-capitulo-no-9-una-infamia-imperdonable/.

  5. Catalina Gonella, “Journalists Protest, Mourn Killing of Mexican Reporter Javier Valdez Cárdenas,” NBC News, May 16, 2017, https://www.nbcnews.com/newslatino/journalists-protest-mourn-killing-mexican-reporter-javier-valdez-c-rdenasn760161 (archive: perma.cc/LK2U-3A8Z); Phil Davison, “Javier Valdez Cardenas, Obituary: Crusading Journalist Who Covered Mexican Drug Trade,” Independent, May 17, 2017, https://www.independent.co.uk/news/obituaries/javier-valdez-cardenas-a7740786.html (archive: perma.cc/RM5D-EQXC).

  6. John Scott-Railton, Bill Marczak, Siena Anstis, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless VI: Mexican Journalists Investigating Cartels Targeted with NSO Spyware Following Assassination of Colleague, Research Report No. 116, Citizen Lab, University of Toronto, November 27, 2018, https://citizenlab.ca/2018/11/mexican-journalists-investigating-cartels-targeted-nso-spyware-following-assassination-colleague/ (archive: perma.cc/QCH8-PFS2).

  7. John Scott-Railton, Bill Marczak, Siena Anstis, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless VII: Wife of Journalist Slain in Cartel- Linked Killing Targeted with NSO Group’s Spyware, Research Report No. 117, Citizen Lab, University of Toronto, March 20, 2019, https://citizenlab.ca/2019/03/nso-spyware-slain-journalists-wife/ (archive: perma.cc/9APZ-TM2J).

  8. Ronen Bergman and Mark Mazzetti, “The Battle for the World’s Most Powerful Cyberweapon,” New York Times, January 28, 2022, https://www.nytimes.com/202201/28/magazine/nso-group-israel-spyware.html.

  9. Edward Hunt, “The U.S. Has Spent Billions Trying to Fix Mexico’s Drug War. It’s Not Working,” Washington Post, March 15, 2021, https://www.washingtonpost.com/politics/2021/03/15/us-has-spent-billions-trying-fix-mexicos-drug-war-itsnot-working/; Jess Ford, Mérida Initiative: The United States Has Provided Counternarcotics and Anticrime Support but Needs Better Performance Measures, Govern- ment Accountability Office, July 2010, https://www.gao.gov/assets/gao-10-837.pdf (archive: perma.cc/CJ6U-HRLX); Clare Ribando Seelke and Ramon Miro, “Mexico’s Immigration Control Efforts,” Congressional Research Service, March 13, 2023, https://crsreports.congress.gov/product/pdf/IF/IF10215.

  10. Cécile Schilis-Gallego, “Spying on Mexican Journalists: Investigating the Lucrative Market of Cyber-Surveillance,” Forbidden Stories, December 7, 2020, https://forbiddenstories.org/spying-on-mexican-journalists-investigating-thelucrative-market-of-cyber-surveillance/.

  11. US Attorney’s Office, Eastern District of New York, “Ex–Mexican Secretary of Public Security Genaro Garcia Luna Convicted of Engaging in a Continuing Criminal Enterprise and Taking Millions in Cash Bribes from the Sinaloa Cartel,” press release, February 21, 2023, https://www.justice.gov/usao-edny/pr/ex-mexicansecretary-public-security-genaro-garcia-luna-convicted-engaging-continuing.

  12. Keegan Hamilton, “El Chapo’s Inside Man Was America’s Closest Partner in Mexico,” Vice, February 24, 2023, https://www.vice.com/en/article/3adxp9/genaro-garcia-luna-us-trial-drug-trafficking-conviction (archive: perma.cc/ZGE4-NLKG).

  13. US Attorney’s Office, Eastern District of New York, “Ex–Mexican Secretary of Public Security”; United Mexican States v. Genaro Garcia Luna et al., File # 135011567 (11th Cir. Sept. 21, 2021), https://insightcrime.org/wp-content/uploads/2021/09/2021-09-21-UIF-Garcia-Luna-Florida.pdf (archive: perma.cc/EE2W-9YVC); Peniley Ramírez, Los millonarios de la guerra: el expediente inédito de García Luna y sus socios (Mexico City: Grijalbo, 2020).

  14. Zedryk Raziel and Elías Camhaji, “García Luna Sold Spy Technology to the Mexican Government during the Peña Nieto Administration,” El País, May 8, 2023, https://english.elpais.com/international/2023-05-08/garcia-luna-sold-spy-technology-to-the-mexican-government-during-the-pena-nieto-administration.html (archive: perma.cc/6EGL-7WJH); Maria Hinojosa and Peniley Ramírez, “Operation Miami,” USA v. García Luna, podcast, 43:16, December 30, 2022, https://podcasts.apple.com/us/podcast/episode-4-operation-miami/id1657286545?i=1000591790925 (archive: perma.cc/F9WD-F3JV); Peniley Ramírez, “Denuncias contra exsecretario de seguridad de México muestran red de empresas fachada que movió más de 50 millones de dólares en 11 países,” Univision, May 18, 2020, https://www.univision.com/noticias/america-latina/denuncias-contra-exsec retario-de-seguridad-de-mexico-muestran-red-de-empresas-fachada-que-moviomas-de-50-millones-de-dolares-en-11-paises.

  15. Raziel and Camhaji, “García Luna Sold Spy Technology.”

  16. Tim Golden, “U.S. Investigators Uncovered Alleged Corruption by Mexico’s Former Security Minister Years before He Was Indicted,” ProPublica, January 22, 2023, https://www.propublica.org/article/genaro-garcia-luna-bribery-trial-dea-mexico-cartel (archive: perma.cc/7W7G-DGV2).

  17. Richard Silverstein, “Mexican Government Cancels NSO Group Cyber-Surveillance Contract, Launches Corruption Investigation,” Tikun Olam (blog), May 11, 2020, https://www.richardsilverstein.com/2020/05/11/mexican-government-cancels-nso-group-cyber-surveillance-contract/ (archive: perma.cc/X9BF-GE4W).

  18. Oded Yaron, “The Secret of NSO’s Success in Mexico,” Haaretz, November 30, 2020, https://www.haaretz.com/israel-news/tech-news/2020-11-30/ty-article/.highlightthe-secret-of-nsos-success-in-mexico/0000017f-e0f5-d568-ad7f-f3ff5cff0000 (archive: perma.cc/EE9U-QXQ6).

  19. Stephanie Kirchgaessner, “Dominican Investigative Journalist Targeted with NSO Spyware, Report Says,” Guardian, May 2, 2023, https://www.theguardian.com/world/2023/may/02/nuria-piera-spyware-target-nso-group.

  20. Bergman and Mazzetti, “Battle for the World’s Most Powerful Cyberweapon.”

  21. Richard Silverstein, “Former GOP National Finance Chair, Eliott Broidy, and Convicted Mexican Billionaire, Brokered First Foreign Sale of NSO Group Malware to Mexico,” Tikun Olam (blog), February 25, 2020, https://www.richardsilversteincom/2020 /02 /25 /former-gop-bundler-eliot-broidy-and-convicted-mexicanbillionaire-brokered-first-foreign-sale-of-nso-group-malware-to-mexico/.

  22. Silverstein, “Former GOP National Finance Chair.”

  23. Yaron, “Secret of NSO’s Success in Mexico.”

  24. Seth Hettena, “Scandal, Spyware, and 69 Pounds of Weed,” Daily Beast, August 3, 2021, https://www.thedailybeast.com/scandal-spyware-and-69-pounds-of-weed.

  25. Hettena, “Scandal, Spyware, and 69 Pounds of Weed.”

  26. Tomer Ganon and Hagar Ravet, “The Dodgy Framework and the Middlemen: How NSO Sold Its First Pegasus License,” CTech, February 24, 2020, https://www.calcalistech.com/ctech/articles/0,7340,L-3796112,00.html (archive: perma.cc/GL9P-GYT2).

  27. Ganon and Ravet, “Dodgy Framework and the Middlemen.”

  28. “Israeli Eitanium Emerges from Woodwork Financed by Sector Heavyweights,”ntelligence Online, November 18, 2021, https://www.intelligenceonline.com/surveillance—interception/2021/11/18/israeli-eitanium-emerges-from-woodworkfinanced-by-sector-heavyweights,109705703-eve.

  29. Ganon and Ravet, “Dodgy Framework and the Middlemen.”

  30. Thomas Brewster, “A Multimillionaire Surveillance Dealer Steps Out of the Shadows . . . and His $9 Million WhatsApp Hacking Van,” Forbes, August 5, 2019, https://www.forbes.com/sites/thomasbrewster/2019/08/05/a-multimillionairesurveillance-dealer-steps-out-of-the-shadows-and-his-9 -million-whatsapphacking-van/.

  31. Hettena, “Scandal, Spyware, and 69 Pounds of Weed.”

  32. Natalie Kitroeff and Ronen Bergman, “How Mexico Became the Biggest User of the World’s Most Notorious Spy Tool,” New York Times, April 18, 2023, https://www.nytimes.com/2023/04/18/world/americas/pegasus-spyware-mexico.html (archive: perma.cc/7CBX-QA84).

  33. Katitza Rodriguez and Gabriela Manuli, “Mexicans Need Transparency on Secret Surveillance Contracts,” Electronic Frontier Foundation, July 24, 2012, https://www.eff.org/deeplinks/2012/07/mexicans-need-transparency-secretsurveillance-contracts (archive: perma.cc/3GHD-3XS3); Yaron, “Secret of NSO’s Success in Mexico.”

  34. “Mexico: Army Used Pegasus to Spy on Human Rights Defender Raymundo Ramos,” Article 19, March 7, 2023, https://www.article19.org/resources/mexico-army-used-pegasus-to-spy-on-human-rights-defender-raymundo-ramos/ (archive: perma.cc/YHK5-NMUJ).

  35. Oded Yaron, “NSO Spyware Used by Private Firm against Reporter, Top Mexican Official,” Haaretz, November 11, 2021, https://www.haaretz.com/israel-newstech-news/2021-11-11/ty-article/.premium/nso-spyware-used-by-private-firmagainst-reporter-first-arrest-in-mexico/0000017f-f2c6-d487-abff-f3fe3b940000 (archive: perma.cc/6BJ9-WNZZ); Amitai Ziv, “Revealed: The Israelis Making Millions Selling Cyberweapons to Latin America,” Haaretz, December 8, 2020, https://www.haaretz.com/israel-newstech-news/2020-12-08/ty-article/.highlight/revealed-the-israelis-selling-cyber weapons-to-latin-america/0000017f-e130-d9aa-afff-f9784e320000.

  36. Ganon and Ravet, “Dodgy Framework and the Middlemen.”

  37. Tomer Ganon and Hagar Ravet, “The Rayzone Group’s Secret Cyber Intelligence Activities Revealed,” CTech, December 29, 2020, https://www.calcalistech.comctech/articles/0,7340,L-3884553,00.html.

  38. Omer Kabir, “Report Reveals Which Countries Are Using Circles Technologies’ Invasive Spyware,” CTech, December 1, 2020, https://www.calcalistech.com/ctech/articles/0,7340,L-3878410,00.html (archive: perma.cc/87LV-6RE2).

  39. Rebecca Ballhaus and Julie Bykowicz, “Elliott Broidy Quits RNC Post after Report on Payment to Ex-Model,” Wall Street Journal, April 13, 2018, https://www.wsj.com/articles/elliott-broidy-quits-rnc-post-after-report-on-payment-to-ex-model1523645801; Kenneth P. Vogel, “Elliott Broidy Pleads Guilty in Foreign LobbyingCase,” New York Times, October 20, 2020, https://www.nytimes.com/2020/10/20us/politics/elliott-broidy-foreign-lobbying.html; Ryan Grim and Alex Emmons, “Trump Fundraiser Offered Russian Gas Company Plan to Get Sanctions Lifted for 26 Million,” Intercept, April 20, 2018, https://theintercept.com/2018/04/20/elliott-broidy-trump-russia-sanctions/ (archive: perma.cc/EH4C-X4RN).

  40. David D. Kirkpatrick, “A Top Trump Fund-Raiser Says Qatar Hacked His Email,” New York Times, March 5, 2018, https://www.nytimes.com/2018/03/05/worldmiddleeast/qatar-trump-hack-email.html.

  41. Ziv, “Revealed: The Israelis Making Millions.”

  42. Ziv, “Revealed: The Israelis Making Millions.”

  43. Yaron, “NSO Spyware Used by Private Firm”; “Mexico,” Database of Israeli Mili- tary and Security Export, accessed April 22, 2024, https://www.dimse.info/mexico/ (archive: perma.cc/FP3Y-L9KA); “Secretaría de la Defensa Nacional de México,” Distributed Denial of Secrets, January 23, 2024, https://ddosecrets.com/article/secretaria-de-la-defensa-nacionalde-mexico.

  44. Arturo Angel, “Translated from Spanish: Videgaray, Cienfuegos and Duarte, behind Payments to Pegasus for Espionage,” Ana Noticias, July 22, 2021, https://ananoticias.com/2021/07/22/translated-from-spanish-videgaray-cienfuegos-and-duartebehind-payments-to-pegasus-for-espionage/.

  45. Yaron, “Secret of NSO’s Success in Mexico.”

  46. Suhail Gharaibeh, “Israel, Cybersurveillance, and the Case of the Ayotzinapa 43,” NACLA, September 14, 2022, https://nacla.org/israel-cybersurveillance-mexico-case-ayotzinapa-43 (archive: perma.cc/X4TS-VF9S).

  47. “Hacking Team,” WikiLeaks, July 8, 2015, https://wikileaks.org/hackingteam/emails/ (archive: perma.cc/VE8F-FJE4).

  48. Elizabeth Gonzalez, “Explainer: Hacking Team’s Reach in the Americas,” ASCOA, July 30, 2015, https://www.as-coa.org/articles/explainer-hacking-teams-reach-americas (archive: perma.cc/L432-7EFV).

  49. Lorenzo Franceschi-Bicchierai, “Hacking Team’s ‘Illegal’ Latin American Empire,”ice, April 18, 2016, https://www.vice.com/en/article/gv5v8q/hacking-team-illegal-latin-american-empire (archive: perma.cc/G39Y-G7E3).

  50. Eric Banoun, “MEXICO PGR URGENT,” email, November 29, 2014, https://wikileaks.org/hackingteam/emails/emailid/5986 (archive: perma.cc/J4XC-RM98), in “Hacking Team,” Wiki- Leaks, July 8, 2015.

  51. “Mexico: $300 Million in Spyware Spending Included Kickbacks,” Associated Press, July 21, 2021, https://apnews.com/article/technology-middle-east-mexico-spyware-ee103912620f5d7267f3369a95e5fe2d (archive: perma.cc/J8ZR-CZ8K).

  52. Raúl Olmos, “Subordinado de Murillo Karam, ligado a grupo empresarial que vendió Pegasus a la PGR,” Mexicanos Contra la Corrupción y la Impunidad, February 20, 2017, https://contralacorrupcion.mx/pegasus-pgr/.

  53. Lilach Baumer, “Lawsuit Asks to Restrict Sales of Israeli Spyware,” CTech, September 2, 2018, https://www.calcalistech.com/ctech/articles/0,7340,L-3745470,00.html (archive: perma.cc/FK7G-D2FJ).

  54. Amitai Ziv, “Raising Concerns over Press Freedom, Israel’s NSO Report- edly Sold Ghana Surveillance Tech,” Haaretz, July 3, 2019, https://www.haaretz.com/israel-news/2019-07-03/ty-article/.premium/raising-concerns-over-press-freedom-israels-nso-reportedly-sold-ghana-spyware/0000017f-e94b-df5f-a17ffbdfa9510000; Rolando Rodríguez B., “Abren sumario en caso Hacking Team,”a Prensa, August 6, 2015, https://www.prensa.com/locales/Espiar-obsesion-Martinelli_0_4271572998.html (archive: perma.cc/P2CW-YA27); “Rwandan Authorities Chose Thousands of Activists, Journalists and Politicians to Target with NSO Spyware,” Amnesty Inter- national, July 19, 2021, https://www.amnesty.org/en/latest/press-release/2021/07/rwandan-authorities-chose-thousands-of-activists-journalists-and-politicians-to-target-with-nso-spyware/ (archive: perma.cc/9RAF-K2YB); Ellen Ioanes, “Israeli Spyware Was Used against US Diplomats in Uganda,” Vox, December 4, 2021, https://www.vox.com/2021/12/4/22817236/nso-group-israeli-spyware-pegasus-hack-us-diplomats-uganda (archive: perma.cc/5YNT-RDGB); John Scott-Railton, Bill Marczak, Irene Poetranto, Bahr Abdul Razzak, Sutawan Chanprasert, and Ron Deibert, GeckoSpy: Pegasus Spyware Used against Thailand’s Pro-Democracy Movement, Research Report No. 157, Citizen Lab, University of Toronto, July 17, 2022, https://citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-against-thailands-pro-democracy-movement/ (archive: perma.cc/Q8XX-P56P); Ronen Bergman and Mark Mazzetti, “Israeli Companies Aided Saudi Spying despite Khashoggi Killing,” New York Times, July 17, 2021, https://www.nytimes.com/2021/07/17/world/middleeastisrael-saudi-khashoggi-hacking-nso.html; Chaim Levinson, “With Israel’s Encouragement, NSO Sold Spyware to UAE and Other Gulf States,” Haaretz, August 25, 2020, https://www.haaretz.com/middle-east-news/2020-08-25/ty-article/.premium/with-israels-encouragement-nso-sold-spyware-to-uae-and-other-gulf-states/0000017f-dbf3-d856-a37f-fff3a4ba0000 (archive: perma.cc/WMZ8-G3F4).

  55. Dolia Estevez, “Mexico’s Proposed Tax on Soda, Junk Food Opposed by Billionaire Beverage and Food Barons,” Forbes, October 28, 2013, https://www.forbes.com/sites/doliaestevez/2013/10/28/mexicos-proposed-tax-on-soda-junk-food-opposed-by-billionaire-beverage-and-food-barons/ (archive: perma.cc/VHE2-LW9J).

  56. Gharaibeh, “Israel, Cybersurveillance, and the Case.”

  57. Gharaibeh, “Israel, Cybersurveillance, and the Case.”

  58. Interdisciplinary Group of Independent Experts, “GIEI Ayotzinapa Report Summary,” National Security Archive, October 12, 2015, https://nsarchive.gwu.edu/document/27608-1-giei-ayotzinapa-report-summary.

  59. Gharaibeh, “Israel, Cybersurveillance, and the Case.”

  60. Juan Omar Fierro, “Niega PGR fragmentación de indagatoria del caso Iguala,”l Universal, February 21, 2016, https://www.eluniversal.com.mx/articulo/nacion/seguridad/2016/02/21/niega-pgr-fragmentacion-de-indagatoria-del-caso-iguala/ (archive: perma.cc/YYS3-8XPP).

  61. John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware, Research Report No. 93, Citizen Lab, University of Toronto, June 19, 2017, https://citizenlab.ca/2017/06/reckless-exploit-mexico-nso/ (archive: perma.cc/M9VM-M8BN).

  62. Azam Ahmed, “Mexico Spyware Inquiry Bogs Down. Skeptics Aren’t Surprised,”ew York Times, February 20, 2018, https://www.nytimes.com/2018/02/20/worldamericas/mexico-spyware-investigation.html.

  63. Ronen Bergman and Oscar Lopez, “Former Official Wanted by Mexico Takes Refuge in Israel,” New York Times, July 15, 2021, https://www.nytimes.com/2021/0715/world/middleeast/israel-mexico-zeron-extradition.html.

  64. Tomer Ganon, “The Wanted Mexican That Is Hiding Out at the Luxury Home of the Rayzone Group Entrepreneur,” CTech, May 18, 2022, https://www.calcalistech.com/ctechnews/article/u1ahyselk.

  65. NMás, “Conferencia matutina AMLO—Miércoles 6 de Noviembre 2019,” November 6, 2019, video, 1:52:00, https://www.youtube.com/watch?v=BjzRY-nQT2w (archive: perma.cc/HT4L-7MJQ).

  66. Nina Lakhani, “Fifty People Linked to Mexico’s President among Potential Targets of NSO Clients,” Guardian, July 19, 2021, https://www.theguardian.com/news/2021/jul/19/fifty-people-close-mexico-president-amlo-among-potential-targets-nso-clients (archive: perma.cc/MXB9-4586).

  67. Centro de Produccion CEPROPIE, “Conferencia de prensa matutina del martes 20 de julio, 2021,” July 20, 2021, video, 2:03:55, https://www.youtube.com/watch?v= (archive: perma.cc/7Q8R-TKTE) HOrjI2dMl4U.

  68. Suzanne Smalley, “Pegasus Spyware Trial Implicating Former President Kicks Off in Mexico,” Record, December 5, 2023, https://therecord.media/mexico-pegasus-spyware-trial-kicks-off (archive: perma.cc/N3FZ-RMB6); Mary Beth Sheridan,“Mexico Makes First Arrest in Pegasus Spying Scandal,” Washington Post, November 9, 2021, https://www.washingtonpost.com/world/2021/11/09/mexico-pegasus-nso/.

  69. Associated Press, “Israeli Spyware Firm Distances Itself from Mexico Suspect,”netnews, November 9, 2021, https://www.ynetnews.com/article/sytka1fwy (archive: perma.cc/LPR3-VQGN).

  70. “Mexico: Investigations into the Use of Pegasus Spyware Must Continue,” Article 19, January 15, 2024, https://www.article19.org/resources/mexico-investigations-into-the-use-of-pegasus-spyware-must-continue/ (archive: perma.cc/2NVB-X25R).

  71. “Mexico: Investigations into the Use of Pegasus.”

  72. Daina Beth Solomon, “Mexican Opposition Lawmaker Says He Was Target of Pegasus Spyware,” Reuters, October 18, 2022, https://www.reuters.com/worldamericas/mexican-opposition-lawmaker-says-he-was-target-pegasus-spyware2022-10-18/.

  73. “CPJ Welcomes 2nd Conviction in Case of Slain Mexican Journalist Javier Valdez Cárdenas,” Committee to Protect Journalists, June 9, 2021, https://cpj.org/2021/06/cpj-welcomes-2nd-conviction-in-case-of-slain-mexican-journalist-javier-valdez-cardenas/ (archive: perma.cc/EY4W-EJTU).

  74. Keegan Hamilton, “Who Ordered the Murder of a Legendary Mexican Journalist? El Chapo’s Trial Only Adds to the Mystery,” Vice, January 24, 2019, https://www.vice.com/en/article/43zd3g/el-chapos-former-right-hand-man-says-drug-lords-sons-were-behind-killing-of-legendary-journalist (archive: perma.cc/KM6H-R6AA).

  75. Keegan Hamilton, “Mexico Wants the US to Hand Over El Chapo’s Godson for Killing of Legendary Journalist,” Vice, September 19, 2022, https://www.vice.com/en/article/4ax4q9/damaso-lopez-journalist-killing-extradition.

  76. Ahmed, “Mexico Spyware Inquiry Bogs Down”; Luis Fernando García, “Spyware in Mexico: An Interview with Luis Fernando García of R3D Mexico,” interviewed by Deji Bryce Olukotun, Access Now, June 22, 2017, https://www.accessnow.orgspyware-mexico-interview-luis-fernando-garcia-r3d-mexico/.

  77. “Secretaría de la Defensa Nacional de México,” Distributed Denial of Secrets, January 23, 2024, https://ddosecrets.com/article/secretaria-de-la-defensa-nacionalde-mexico.

  78. Dina Temple-Raston and Will Jarvis, “Internal Documents Show Mexican Army Used Spyware against Civilians, Set Up Secret Military Intelligence Unit,” Record, March 7, 2023, https://therecord.media/mexican-army-spyware (archive: perma.cc/7GJH-DH7F).

  79. Natalie Kitroeff and Ronen Bergman, “Spying by Mexico’s Armed Forces Brings Fears of a ‘Military State,’” New York Times, March 7, 2023, https://www.nytimes.com/2023/03/07/world/americas/mexico-military-surveillance.html.

  80. “Mexican President Slams Report Military Spied on Activist as ‘Made Up,’” Reuters, March 10, 2023, https://www.reuters.com/world/americas/mexican-president-slamsreport-military-spied-activist-made-up-2023-03-10/.

  81. Mary Beth Sheridan, “Pegasus Spyware Reaches into Mexican President’s Inner Circle,” Washington Post, May 24, 2023, https://www.washingtonpost.com/world2023/05/24/pegasus-spyware-ayotzinapa-mexico/.

CHAPTER 12: ANARCHY IN THE UNITED KINGDOM

  1. Bill Marczak and John Scott-Railton, Move Fast and Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings, Research Report No. 126, Citizen Lab, University of Toronto, April 3, 2020, https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/ (archive: perma.cc/FE6T-LBCG).

  2. US Federal Trade Commission, “FTC Requires Zoom to Enhance Its Security Practices as Part of Settlement,” press release, November 9, 2020, https://www.ftc.gov/news-events/news/press-releases/2020/11/ftc-requires-zoom-enhance-its-security-practices-part-settlement (archive: perma.cc/34UG-NHD6).

  3. Stephanie Kirchgaessner, “Jeff Bezos Hack: Amazon Boss’s Phone ‘Hacked by Saudi Crown Prince,’” Guardian, January 22, 2020, https://www.theguardian.comtechnology/2020/jan/21/amazon-boss-jeff-bezoss-phone-hacked-by-saudi-crownprince.

  4. Kim Zetter and Joseph Cox, “Here Is the Technical Report Suggesting Saudi Arabia’s Prince Hacked Jeff Bezos’ Phone,” Vice, January 22, 2020, https://www.vice.com/en/article/v74v34/saudi-arabia-hacked-jeff-bezos-phone-technical-report.

  5. David Brown, “Cherie Blair Is Adviser to NSO, the Firm behind Pegasus Spyware,”imes (UK), October 7, 2021, https://www.thetimes.co.uk/article/cherie-blair-isadviser-to-nso-the-firm-behind-pegasus-spyware-rjdhhvr2s (archive: perma.cc/GVZ3-5NA7).

  6. “Al Maktoum Judgments,” Courts and Tribunals Judiciary, October 6, 2021, https://www.judiciary.uk/judgments/al-maktoum-judgments/ (archive: perma.cc/C3JY-GSTJ).

  7. Frank Gardner, “Dubai’s Sheikh Mohammed Abducted Daughters and Threatened Wife—UK Court,” BBC, March 5, 2020, https://www.bbc.com/news/world-middleeast-51756984; “Profile,” HRH Princess Haya Bint Al Hussein, September 30, 2005, https://web.archive.org/web/20050930232238/http:/princesshaya.net/profileshtm.

  8. Katie Thomas, “Princess Shakes Up Equestrian World,” New York Times, September 24, 2010, https://www.nytimes.com/2010/09/25/sports/25horses.html; Frank Gardner, “Princess Haya: Dubai Ruler Had Ex-Wife’s Phone Hacked—UK Court,” BBC, October 6, 2021, https://www.bbc.com/news/world-middle-east-58814978 (archive: perma.cc/RVU5-ZM5H); Vivian Yee and David D. Kirkpatrick, “Princess Haya, Wife of Dubai’sRuler, Seeks Refuge in London,” New York Times, July 2, 2019, https://www.nytimes.com/2019/07/02/world/middleeast/princess-haya-sheikh-mohammed-bin.html.

  9. Vanessa Grigoriadis, “‘You’re Essentially a Prisoner’: Why Do Dubai’s Princesses Keep Trying to Escape?,” Vanity Fair, February 20, 2020, https://www.vanityfair.com/news/2019/11/why-do-dubais-princesses-keep-trying-to-escape.

  10. Joshua Hammer, “The Runaway Princesses of Dubai,” Town & Country, January 4, 2022, https://www.townandcountrymag.com/society/money-and-power/a29848986dubai-princess-disappearance-divorce/ (archive: perma.cc/P92R-5RUS).

  11. Bill Bostock, “UK Court Orders Sheikh Mohammed to Pay $734 Million Divorce Settlement to Princess Haya, Who Fled in 2019 after He Was Accused of Impris- oning His Daughter,” Business Insider, December 21, 2021, https://www.business insider.com/princess-haya-wins-734m-settlement-divorce-sheikh-mohammed-flee2021-12.

  12. Mehul Srivastava and Jane Croft, “Dubai Ruler’s ‘Campaign of Fear and Intimida- tion’ against Princess Haya,” Financial Times, October 8, 2021, https://www.ft.com/content/752a36e9-6148-4d9c-87af-63d806a7d667.

  13. Gardner, “Dubai’s Sheikh Mohammed Abducted Daughters.”

  14. Sara Lieser, “British Court Confirms Validity of Threats to Princess Haya,” Chron- icle of the Horse, March 6, 2020, https://www.chronofhorse.com/article/british-courtconfirms-validity-of-threats-to-princess-haya/ (archive: perma.cc/X8LZ-8D9T).

  15. David Pegg and Paul Lewis, “Dubai Suspected after Princess Haya Listed in Leaked Pegasus Project Data,” Guardian, July 21, 2021, https://www.theguardian.comworld/2021/jul/21/dubai-suspected-after-princess-haya-listed-in-leaked-pegasusproject-data.

  16. Pegg and Lewis, “Dubai Suspected after Princess Haya Listed.”

  17. Jess Glass, “Hacking and House-Hunting: High Court Issues Rulings against Sheikh Mohammed,” Evening Standard, October 6, 2021, https://www.standard.co.uk/newsuk/princess-hacking-high-court-cherie-blair-court-of-appeal-b959185.html (archive: perma.cc/RAJ2-7HLR).

  18. Paul Waldie, “How Toronto’s Citizen Lab Uncovered the Hacking of Princess Haya,” Globe and Mail, October 11, 2021, https://www.theglobeandmail.com/world/article-how-torontos-citizen-lab-uncovered-the-hacking-of-princess-haya/ (archive: perma.cc/3HB8-S5E5).

  19. Heidi Blake, “The Fugitive Princesses of Dubai,” New Yorker, May 1, 2023, https://www.newyorker.com/magazine/2023/05/08/the-fugitive-princesses-of-dubai (archive: perma.cc/T2YQ-3DD9); Daniela Elser, “‘Never Seen Again’: Dubai Princess a ‘Prisoner’ 20 Years after Failed Attempt to Flee,” News.com.au, July 6, 2019, https://www.news.com.auentertainment/celebrity-life/royals/never-seen-again-dubai-princess-a-prisoner20-years-after-failed-attempt-to-flee/news-story/7d269e93cfa28b416f43e78f2 166c7b3.

  20. Elser, “‘Never Seen Again.’”

  21. Blake, “Fugitive Princesses of Dubai.”

  22. Crofton Black, “Spy Companies Using Channel Islands to Track Phones around the World,” Bureau of Investigative Journalism, December 16, 2020, https://www.thebureauinvestigates.com/stories/2020-12-16/spy-companies-using-channel-islands-to-track-phones-around-the-world (archive: perma.cc/XK6Y-D5QE).

  23. “Rayzone’s Interception Modus Operandi Exposed by Legal Cases,” IntelligenceOnline, January 21, 2021, https://www.intelligenceonline.com/surveillance—inter ception/2021/01/21/rayzone-s-interception-modus-operandi-exposed-by-legalcases,109636393-art.

  24. Tomer Ganon, “Israel Police Purchased New Surveillance Software without AG Approval,” CTech, May 29, 2023, https://www.calcalistech.com/ctechnews/articlebkq6eef8h; Ryan Gallagher, “Your Ad Data Is Now Powering Government Surveillance,” Bloomberg, May 10, 2023, https://www.bloomberg.com/news/articles2023-05-11/surveillance-company-turns-ad-data-into-government-tracking-tool (archive: perma.cc/3K8Z-2HZA).

  25. Black, “Spy Companies Using Channel Islands.”

  26. Black, “Spy Companies Using Channel Islands.”

  27. Kim Hjelmgaard and Kevin Johnson, “How the FBI Played a Role in the Capture of Princess Latifa of Dubai,” Yahoo News, July 12, 2021, https://www.yahoo.com/news/fbi-played-role-capture-princess-090042592.html (archive: perma.cc/N4SR-MYTK). Originally published as “Princess Latifa of Dubai Caught at Sea— and FBI Played Key Role,” USA Today, July 7, 2021, https://www.usatoday.com/indepth/news/2021/07/07/princess-latifa-dubai-caught-sea-and-fbi-played-key-role7584218002/.

  28. Hjelmgaard and Johnson, “How the FBI Played a Role.”

  29. Douglas Guilfoyle, “Maritime Law Enforcement Operations and Intelligence in an Age of Maritime Security,” International Law Studies 93 (2017), https://digital-commons.usnwc.edu/ils/vol93/iss1/11 (archive: perma.cc/LG2W-2D3J).

  30. Blake, “Fugitive Princesses of Dubai.”

  31. Hjelmgaard and Johnson, “How the FBI Played a Role.”

  32. Waldie, “How Toronto’s Citizen Lab Uncovered the Hacking of Princess Haya.”

  33. Bob Chaundy, “Faces of the Week,” BBC, March 23, 2007, http://news.bbc.co.uk1/hi/magazine/6483785.stm.

  34. Timothy Smith, “WTF Tony Blair?,” openDemocracy, November 22, 2014, https:// www.opendemocracy.net/en/opendemocracyuk/wtf-tony-blair/; Robert Mendick, “£1.6m in the Bank for Cherie Blair’s Law Firm, Thanks to Advising ‘Dictatorships,’” Telegraph, February 27, 2016, https://www.telegraph.co.uk/news/politics/tony-blair12176182/1.6m-in-the-bank-for-Cherie-Blairs-law-firm-thanks-to-advisingdictatorships.html; Ian Black and Patrick Kingsley, “Tony Blair Accused of Conflict of Interests in Middle East,” Guardian, June 27, 2014, https://www.theguardian.compolitics/2014/jun/27/tony-blair-conflict-interests-middle-east; Jim Pickard and George Parker, “Tony Blair Shuts Down Advisory Firm That Made Him Millions,” Financial Times, September 20, 2016, https://archive.ph/iDTve (archive: perma.cc/H8J6-YBMY).

  35. “Blair Advising Saudis under $12m Deal with His Institute: Report,” Middle East Eye, July 22, 2018, https://www.middleeasteye.net/news/blair-advising-saudis-under-12m-deal-his-institute-report (archive: perma.cc/G6N3-TE3R).

  36. Randeep Ramesh, “Tony Blair Courted Chinese Leaders for Saudi Prince’s Oil Firm,” Guardian, April 28, 2016, https://www.theguardian.com/politics/2016/apr/28/tony-blair-chinese-leaders-saudi-princes-oil-firm-middle-east-envoy (archive: perma.cc/8Z8B-5CVS).

  37. Luke Harding, “Hillary Clinton Emails: Cherie Blair Lobbied for Qatari Crown Prince,” Guardian, September 1, 2015, https://www.theguardian.com/politics/2015sep/01/hillary-clinton-emails-cherie-blair-lobbied-qatari-royal-family.

  38. Oliver Bullough, Butler to the World: How Britain Helps the World’s Worst People Launder Money, Commit Crimes, and Get Away with Anything (New York: St. Martin’s Press, 2022).

  39. Brown, “Cherie Blair Is Adviser to NSO.”

  40. Stephanie Kirchgaessner, “Ex–Obama Official Exits Israeli Spyware Firm amid Press Freedom Row,” Guardian, February 4, 2020, https://www.theguardian.com/world/2020/feb/04/ex-obama-official-juliette-kayyem-quits-israeli-spyware-firmamid-press-freedom-row.

  41. Gardner, “Princess Haya.”

  42. Ronan Farrow, “How Democracies Spy on Their Citizens,” New Yorker, April 18, 2022, https://www.newyorker.com/magazine/2022/04/25/how-democracies-spy-on-their-citizens (archive: perma.cc/HL54-QF7S); see also Ron Deibert, “UK Government Officials Infected with Pegasus,” Citizen Lab, April 18, 2022, https://citizenlab.ca/2022/04/uk-government-officials-targeted-pegasus/ (archive: perma.cc/6Q89-WH4Y); Stephanie Kirchgaessner, “No 10 Suspected of Being Target of NSO Spyware Attack—Boris Johnson ‘Told,’” Guardian, April 18, 2022, https://www.theguardian.com/politics/2022/apr/18/no-10-suspected-of-being-target-of-nso-spyware-attack-boris-johnson (archive: perma.cc/CLU8-PE72).

  43. Lizzie Dearden, “Saudi Human Rights Activist Attacked by Men ‘Shouting about Crown Prince Mohammad bin Salman’ in London,” Independent, September 17, 2018, https://www.independent.co.uk/news/uk/crime/saudi-arabia-human-rightsactivist-attacked-london-mbs-ghanem-al-dosari-show-a8538406.html (archive: perma.cc/67Y8-2YHK).

  44. Stephanie Kirchgaessner, “British Judge Rules Dissident Can Sue Saudi Arabia for Pegasus Hacking,” Guardian, August 19, 2022, https://www.theguardian.com/world/2022/aug/19/british-judge-rules-dissident-ghanem-almasarir-can-suesaudi-arabia-for-pegasus-hacking.

  45. Dearden, “Saudi Human Rights Activist Attacked.”

  46. Dearden, “Saudi Human Rights Activist Attacked.”

  47. Stephanie Kirchgaessner, “New Evidence Suggests Spyware Used to Surveil Emirati Activist Alaa al-Siddiq,” Guardian, September 24, 2021, https://www.theguardian.com/world/2021/sep/24/new-evidence-suggests-spyware-used-to-surveil-emiratiactivist-alaa-al-siddiq.

  48. Kirchgaessner, “New Evidence Suggests Spyware Used.”

  49. Kirchgaessner, “New Evidence Suggests Spyware Used.”

  50. Dominic Nicholls, “Death of ‘At Risk’ UAE Dissident Must Be Investigated, Police Urged,” Telegraph, June 20, 2021, https://www.telegraph.co.uk/news/2021/06/20/campaigners-call-probe-intoat-risk-uae-dissidents-death-rule/ (archive: perma.cc/64TC-BG9B).

  51. Nicholls, “Death of ‘At Risk’ UAE Dissident.”

  52. Kirchgaessner, “New Evidence Suggests Spyware Used.”

  53. Karrie Kehoe, “UK Moves to Clamp Down on Dirty Russian Money,” Interna- tional Consortium of Investigative Journalists, March 4, 2022, https://www.icij.org/investigations/fincen-files/uk-moves-to-clamp-down-on-dirty-russian-money.

  54. David Conn, Harry Davies, and Sam Cutler, “Revealed: The Huge British Property Empire of Sheikh Mohammed,” Guardian, April 14, 2021, https://www.theguardian.com/world/2021/apr/14/revealed-the-huge-british-property-empire-of-sheikh-mohammed (archive: perma.cc/82FP-6MJL).

  55. Dan Roan, “What Does Princess Latifa Case Mean for British Sport?,” BBC, February 18, 2021, https://www.bbc.com/news/uk-56119788 (archive: perma.cc/6LTZ-5ZYU).

  56. “Legal Case Launched against Kingdom of Saudi Arabia for Alleged Use of Spyware to Target Dissident,” Leigh Day, May 28, 2019, https://www.leighday.co.uk/news/news/2019-news/legal-case-launched-against-kingdom-of-saudi-arabia-foralleged-use-of-spyware-to-target-dissident/.

  57. Kirchgaessner, “British Judge Rules Dissident Can Sue.”

  58. Sally Weale, “Cambridge University Accused of Faustian Pact in Planned £400m Deal with UAE,” Guardian, July 7, 2021, https://www.theguardian.com/education/2021/jul/07/cambridge-university-accused-of-faustian-pact-in-planned-400m-deal-with-uae (archive: perma.cc/K93J-68GL); Richard Adams, Georgia Goble, and Nick Bartlett, “Cambridge University Halts £400m Deal with UAE over Pegasus Spyware Claims,” Guardian, October 14, 2021, https://www.theguardian.com/education/2021/oct/14/cambridge-university-halts-400m-deal-with-uae-over-pegasus-spyware-claims (archive: perma.cc/CM3Y-JHQU).

  59. “Al Maktoum Judgments.”

  60. Michael Holden, “Dubai Ruler’s Ex-Wife Gets Custody of Children after ‘Exorbi- tant’ Domestic Abuse,” Reuters, March 24, 2022, https://www.reuters.com/worldmiddle-east/dubai-rulers-ex-wife-gets-custody-children-after-exorbitant-domesticabuse-2022-03-24/.

  61. Manaal Fatimah, “Queen Elizabeth II’s Funeral: Arab Royals Pay Their Respects Ahead of the Ceremony,” Harper’s Bazaar Arabia, September 19, 2022, https://www.harpersbazaararabia.com/culture/royal-watch/arab-royals-at-queen-elizabeth-iifuneral; “UK Invites Saudi Crown Prince for Official Visit, in First since Khashoggi Killing,” Middle East Monitor, July 16, 2023, https://www.middleeastmonitor.com/20230716-uk-invites-saudi-crown-prince-for-official-visit-in-first-sincekhashoggi-killing/.

CHAPTER 13: “CAN YOU SIT ON YOUR PHONE?”

  1. “COVID-19: Ontario Now under Provincewide ‘Shutdown’ to Control Spread of Virus,” Global News, April 3, 2021, https://globalnews.ca/news/7736868/covidontario-provincewide-shutdown/ (archive: perma.cc/5VQ6-WW3X).

  2. Laurent Richard and Sandrine Rigaud, Pegasus: How a Spy in Your Pocket Threatens the End of Privacy, Dignity, and Democracy (New York: Henry Holt, 2023).

  3. “Pegasus Project,” Forbidden Stories, accessed May 6, 2024, https://forbiddenstories.org/case/the-pegasus-project/.

  4. “The Pegasus Project,” Guardian, accessed May 20, 2024, https://www.theguardian.com/news/series/pegasus-project; “Takeaways from the Pegasus Project,” Washington Post, August 2, 2021, https://www.washingtonpost.com/investigations/202107/18/takeaways-nso-pegasus-project/.

  5. Bill Marczak, John Scott-Railton, Siena Anstis, and Ron Deibert, “Independent Peer Review of Amnesty International’s Forensic Methods for Identifying PegasusSpyware,” Citizen Lab, University of Toronto, July 18, 2021, https://citizenlab.ca2021/07/amnesty-peer-review/; Forensic Methodology Report: How to Catch NSO Group’s Pegasus, Amnesty International, July 18, 2021, https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/ (archive: perma.cc/VA4J-DVJG).

  6. David Pegg and Sam Cutler, “What Is Pegasus Spyware and How Does It Hack Phones?,” Guardian, July 18, 2021, https://www.theguardian.com/news/2021/jul/18/what-is-pegasus-spyware-and-how-does-it-hack-phones (archive: perma.cc/9UZD-V68D).

  7. Joseph Cox, “Here’s the FBI’s Internal Guide for Getting Data from AT&T, T- Mobile, Verizon,” Vice, October 25, 2021, https://www.vice.com/en/article/m7vqkv/how-fbi-gets-phone-data-att-tmobile-verizon (archive: perma.cc/3C3T-PB6C).

  8. Brigitte Bureau, Catherine Cullen, and Kristen Everson, “Hackers Only Needed a Phone Number to Track This MP’s Cellphone,” CBC News, November 22, 2017, https://www.cbc.ca/news/politics/hackers-cellphone-security-1.4406338 (archive: perma.cc/Z5W7-UG5E).

  9. Stephanie Kirchgaessner, “NSO Offered US Mobile Security Firm ‘Bags of Cash,’ Whistleblower Claims,” Guardian, February 1, 2022, https://www.theguardian.com/news/2022 /feb/01 /nso-offered-us-mobile-security-firm-bags-of-cashwhistleblower-claims.

  10. Gary Miller and Christopher Parsons, Finding You: The Network Effect of Telecommu- nications Vulnerabilities for Location Disclosure, Research Report No. 171, Citizen Lab, University of Toronto, October 26, 2023, https://citizenlab.ca/2023/10/finding-you-teleco-vulnerabilities-for-location-disclosure/ (archive: perma.cc/3ARG-FUPK); Ronald J. Deibert and Gary Miller, “When You Roam, You’re Not Alone,” Lawfare, December 28, 2023, https://www.lawfaremedia.org/article/when-you-roam-you-re-not-alone (archive: perma.cc/A2PZ-3KX6).

  11. Dana Priest, Craig Timberg, and Souad Mekhennet, “Private Israeli Spyware Used to Hack Cellphones of Journalists, Activists Worldwide,” Washington Post, July 18, 2021, https://www.washingtonpost.com/investigations/interactive/2021/nso-spyware-peg asus-cellphones/.

  12. Stephanie Kirchgaessner, Paul Lewis, David Pegg, Sam Cutler, Nina Lakhani, and Michael Safi, “Revealed: Leak Uncovers Global Abuse of Cyber-Surveillance Weapon,” Guardian, July 18, 2021, https://www.theguardian.com/world/2021/jul/18/revealed-leak-uncovers-global-abuse-of-cyber-surveillance-weapon-nso-group-pegasus (archive: perma.cc/Z3UC-MBUX); Nina Lakhani, “Fifty People Linked to Mexico’s President among Poten- tial Targets of NSO Clients,” Guardian, July 19, 2021, https://www.theguardian.com/news/2021/jul/19/fifty-people-close-mexico-president-amlo-among-potentialtargets-nso-clients; Craig Timberg, Michael Birnbaum, Drew Harwell, and Dan Sabbagh, “On the List: Ten Prime Ministers, Three Presidents and a King,” Washington Post, July 20, 2021, https://www.washingtonpost.com/world/2021/0720/heads-of-state-pegasus-spyware/; Diana Moukalled, “UAE: Israel’s (Pegasus) Spyware in the Service of Autocracy,” Daraj, July 18, 2021, https://daraj.media/en/76524/ (archive: perma.cc/FT29-Q84X).

  13. Kirchgaessner et al., “Revealed: Leak Uncovers Global Abuse.”

  14. Kirchgaessner et al., “Revealed: Leak Uncovers Global Abuse.”

  15. Stephanie Kirchgaessner, “Saudis behind NSO Spyware Attack on Jamal Khashog- gi’s Family, Leak Suggests,” Guardian, July 18, 2021, https://www.theguardian.com/world/2021/jul/18/nso-spyware-used-to-target-family-of-jamal-khashoggi-leaked-data-shows-saudis-pegasus (archive: perma.cc/3FSG-W7SU).

  16. Dana Priest, “A UAE Agency Put Pegasus Spyware on Phone of Jamal Khashog- gi’s Wife Months before His Murder, New Forensics Show,” Washington Post, December 21, 2021, https://www.washingtonpost.com/nation/interactive/2021/ hanan-elatr-phone-pegasus/.

  17. Shaun Walker, “Viktor Orbán Using NSO Spyware in Assault on Media, Data Suggests,” Guardian, July 18, 2021, https://www.theguardian.com/news/2021/jul/18/viktor-orban-using-nso-spyware-in-assault-on-media-data-suggests (archive: perma.cc/C4FB-UYJM).

  18. “Szabolcs Panyi,” Forbidden Stories, accessed May 20, 2024, https://web.archive.org/web/20240225030323/https://forbiddenstories.org/journaliste/szabolcs-panyi/.

  19. Szabolcs Panyi and András Pethö, “Hungarian Journalists and Critics of Orbán Were Targeted with Pegasus, a Powerful Israeli Cyberweapon,” Direkt36, July 19, 2021, https://www.direkt36.hu/en/leleplezodott-egy-durva-izraeli-kemfegyver-az-orban-kormany-kritikusait-es-magyar-ujsagirokat-is-celba-vettek-vele/ (archive: perma.cc/D6SH-CQVU).

  20. Forensic Methodology Report: Pegasus Forensic Traces per Target, Amnesty Interna- tional, July 18, 2021, https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-appendix-d/ (archive: perma.cc/62PY-AF3R).

  21. Shaun Walker, “Classes Move to Vienna as Hungary Makes Rare Decision to Oust University,” Guardian, November 16, 2019, https://www.theguardian.com/world/2019/nov/16/ceu-classes-move-to-vienna-orban-hungary-ousts-university (archive: perma.cc/P7QS-YNSD).

  22. Michael Birnbaum, Andras Petho, and Jean-Baptiste Chastand, “In Orban’s Hungary, Spyware Was Used to Monitor Journalists and Others Who Might Challenge the Government,” Washington Post, July 19, 2021, https://www.washingtonpost.com/world/2021/07/18/hungary-orban-spyware/.

  23. Walker, “Viktor Orbán Using NSO Spyware.”

  24. Anuj Srivas and Kabir Agarwal, “Snoop List Has 40 Indian Journalists, Forensic Tests Confirm Presence of Pegasus Spyware on Some,” Wire, July 18, 2021, https://thewire.in/media/pegasus-project-spyware-indian-journalists (archive: perma.cc/7SVR-XGTJ).

  25. Ajoy Ashirwad Mahaprashasta, Sukayna Shantha, and Kabir Agarwal, “Days after Accusing CJI Gogoi of Sexual Harassment, Staffer Put on List of Potential Snoop Targets,” Wire, July 19, 2021, https://thewire.in/rights/ranjan-gogoi-sexualharassment-pegasus-spyware (archive: perma.cc/42S4-MJMS).

  26. Michael Safi, “Key Modi Rival Rahul Gandhi among Potential Indian Targets of NSO Client,” Guardian, July 19, 2021, https://www.theguardian.com/news/2021/jul/19/key-modi-rival-rahul-gandhi-among-indian-targets-of-nso-client (archive: perma.cc/NPC9-LU3U).

  27. Siddharth (@svaradarajan), “Not just another day at the office for @thewire_in after #PegasusProject Policeman arrived today with inane inquiries. ‘Who’s Vinod Dua?’ ‘Who’s Swara Bhaskar?’ ‘Can I see your rent agreement?’ ‘Can I speak to Arfa?’ Asked why he’d come: ‘Routine check for Aug 15’ Strange,” X, July 23, 2021, https://x.com/svaradarajan/status/1418513671764865024 (archive: perma.cc/3MDL-ZWWH).

  28. Srivas and Agarwal, “Snoop List Has 40 Indian Journalists.”

  29. See, for example, Bill Marczak, Adam Hulcoop, Etienne Maynier, Bahr Abdul Razzak, Masashi Crete-Nishihata, John Scott-Railton, and Ron Deibert, Missing Link: Tibetan Groups Targeted with 1-Click Mobile Exploits, Research Report No. 123,Citizen Lab, University of Toronto, September 24, 2019, https://citizenlab.ca/201909/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/ (archive: perma.cc/F62Q-UXN3).

  30. Michael Safi, “Dalai Lama’s Inner Circle Listed in Pegasus Project Data,” Guardian, July 22, 2021, https://www.theguardian.com/news/2021/jul/22/dalai-lama-inner-circle-listed-pegasus-project-data (archive: perma.cc/T3HP-6MKK).

  31. David Pegg, Paul Lewis, Michael Safi, and Nina Lakhani, “FT Editor among 180 Journalists Identified by Clients of Spyware Firm,” Guardian, July 20, 2021, https://www.theguardian.com/world/2021/jul/18/ft-editor-roula-khalaf-among-180-journalists-targeted-nso-spyware (archive: perma.cc/Q73T-GMNU); Miranda Patrucic and Kelly Bloss, “Life in Azerbaijan’s Digital Autocracy: ‘They Want to Be in Control of Everything,’” OCCRP, July 18, 2021, https://www.occrp.org/en/the-pegasus-project/life-in-azerbaijans-digital-autocracy-they-want-to-be-in-control-of-everything.

  32. “Spyware: Governments Can Hack into Your Phone while You Sleep,” Amnesty International, September 26, 2023, https://amnesty.ca/human-rights-news/spyware-governments-can-hack-into-your-phone-while-you-sleep/ (archive: perma.cc/4S5K-CZ3E).

  33. Giorgi Lomsadze, “Azerbaijan Reporter Wins Sex Tape Case,” Eurasianet, January 11, 2019, https://eurasianet.org/azerbaijan-reporter-wins-sex-tape-case.

  34. Kim Willsher, “Pegasus Spyware Found on Journalists’ Phones, French Intelligence Confirms,” Guardian, August 2, 2021, https://www.theguardian.com/news/2021/aug/02/pegasus-spyware-found-on-journalists-phones-french-intelligence-confirms (archive: perma.cc/M4BA-RAFL).

  35. “French Prosecutors Open Probe into Alleged Use of Pegasus Malware to Spy on Journalists,” France 24, July 20, 2021, https://www.france24.com/en/europe20210720-french-prosecutors-open-probe-into-alleged-use-of-pegasus-malwareto-spy-on-journalists.

  36. Lisa O’Carroll, “Draft EU Plans to Allow Spying on Journalists Are Dangerous, Warn Critics,” Guardian, June 22, 2023, https://www.theguardian.com/world/2023/jun/22/draft-eu-plans-to-allow-spying-on-journalists-are-dangerous-warn-critics (archive: perma.cc/S55N-JWZN).

  37. Nina Lakhani, “Revealed: Murdered Journalist’s Number Selected by Mexican NSO Client,” Guardian, July 18, 2021, https://www.theguardian.com/news/2021/jul/18/revealed-murdered-journalist-number-selected-mexico-nso-client-cecilio-pineda-birto (archive: perma.cc/MA48-RLBZ).

  38. Lakhani, “Fifty People Linked to Mexico’s President”; Timberg et al., “On the List.”

  39. Lakhani, “Fifty People Linked to Mexico’s President.”

  40. Natalie Kitroeff and Ronen Bergman, “Mexican President Said He Told Ally Not to Worry about Being Spied On,” New York Times, May 23, 2023, https://www.nytimes.com/2023/05/23/world/americas/mexico-president-spying-pegasus.html (archive: perma.cc/Y4A2-BK6Q); Daina Beth Solomon, “Pegasus Spyware Attacks in Mexico Continued under Lopez Obrador, Report Says,” Reuters, October 2, 2022, https://www.reuters.com/world/americas/pegasus-spyware-attacks-mexico-continued-under-lopez-obradorreport-2022-10-03/.

  41. Bill Marczak, John Scott-Railton, Sarah McKune, Bahr Abdul Razzak, and Ron Deibert, Hide and Seek: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries, Research Report No. 113, Citizen Lab, University of Toronto, September 18, 2018, https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/ (archive: perma.cc/G4DD-YL6J); Joe Tidy, “‘I Was a Victim of the WhatsApp Hack,’” BBC, October 31, 2019, https://www.bbc.comnews/technology-50249859.

  42. Jennifer Hansler, Bethlehem Feleke, Mostafa Salem, and Jack Guy, “‘Hotel Rwanda’ Hero to Be Freed after 25-Year Terrorism Sentence Commuted,” CNN, March 24, 2023, https://www.cnn.com/2023/03/24/africa/paul-rusesabagina-released-rwanda-intl/index.html (archive: perma.cc/38E6-GTN7).

  43. Stephanie Kirchgaessner, “Hotel Rwanda Activist’s Daughter Placed under Pegasus Surveillance,” Guardian, July 19, 2021, https://www.theguardian.com/news/2021/jul/19/hotel-rwanda-activist-daughter-pegasus-surveillance (archive: perma.cc/2N79-LXB8).

  44. Michela Wrong, “Rwandans Have Long Been Used to Pegasus-Style Surveillance,” Guardian, July 23, 2021, https://www.theguardian.com/commentisfree/2021/jul/23/rwanda-pegasus-surveillance (archive: perma.cc/59VB-LJ2X).

  45. “Princess Latifa and Princess Haya Listed as Potential Targets by Clients of Spyware Company NSO Group,” Amnesty International, July 21, 2021, https://www.amnesty.org/en/latest/press-release/2021/07/pegasus-project-nso-spyware-princess-latifaprincess-haya/.

  46. Dan Sabbagh, “Data Leak Raises New Questions over Capture of Princess Latifa,”uardian, July 21, 2021, https://www.theguardian.com/world/2021/jul/21/data-leak-raises-new-questions-over-capture-of-princess-latifa (archive: perma.cc/HM6W-EK4U).

  47. Sabbagh, “Data Leak Raises New Questions.”

  48. Sabbagh, “Data Leak Raises New Questions.”

  49. Timberg et al., “On the List.”

  50. Pete Jones, Vyacheslav Abramov, and Miranda Patrucic, “World Leaders on Pegasus List Include France’s President Macron, Morocco’s King Mohammed, Kazakhstan’s President,” OCCRP, July 20, 2021, https://www.occrp.org/en/the-pegasus-project/world-leaders-on-pegasus-list-include-frances-president-macron-moroccos-king-mohammed-kazakhstans-president-tokayev (archive: perma.cc/Y46G-E38M).

  51. Craig Timberg, John Hudson, and Kristof Clerix, “Key Question for Amer- icans Overseas: Can Their Phones Be Hacked?,” Washington Post, July 19, 2021, https://www.washingtonpost.com/national-security/2021/07/19/us-phone-num bers-nso/.

  52. Kylie Atwood, Alex Marquardt, Jeremy Herb, and Zachary Cohen, “Biden’s Iran Envoy Placed on Leave after Security Clearance Suspended amid Investigation into Possible Mishandling of Classified Material, Sources Say,” CNN, June 29, 2023, https://www.cnn.com/2023/06/29/politics/rob-malley-leave-investigation-classified-material/index.html (archive: perma.cc/4SWK-M2WV).

  53. Steven Feldstein, “Biden Cracks Down on the Spyware Scourge,” Foreign Policy, July 31, 2023, https://foreignpolicy.com/2023/07/31/spyware-nso-cytrox-intellexa-pegasus-predator-biden-sanctions-entities-list-israel-europe/ (archive: perma.cc/YG7E-E3ZL).

  54. “Enough Is Enough!,” NSO Group, accessed May 10, 2024, https://www.nsogroup.com/Newses/enough-is-enough/.

  55. Omer Kabir and Hagar Ravet, “NSO CEO Exclusively Responds to Allegations: ‘The List of 50,000 Phone Numbers Has Nothing to Do with Us,’” CTech, July 20, 2021, https://www.calcalistech.com/ctech/articles/0,7340,L-3912882,00.html.56 (archive: perma.cc/P4XU-LZNX). Stephanie Kirchgaessner, “Officials Who Are US Allies among Targets of NSO Malware, Says WhatsApp Chief,” Guardian, July 24, 2021, https://www.theguardiancom/technology/2021/jul/24/officials-who-are-us-allies-among-targets-of-nsomalware-says-whatsapp-chief.

  56. “About the Project,” OCCRP, July 18, 2021, https://www.occrp.org/en/the-pegasusproject/about-the-project; “About the Pegasus Project,” Forbidden Stories, July 18, 2021, https://forbiddenstories.org/about-the-pegasus-project/ (archive: perma.cc/8MM5-5M52).

  57. Stephanie Kirchgaessner and Sam Jones, “Phone of Top Catalan Politician ‘Targeted by Government-Grade Spyware,’” Guardian, July 13, 2020, https://www.theguardian.com/world/2020/jul/13/phone-of-top-catalan-politician-targeted-bygovernment-grade-spyware (archive: perma.cc/9CRS-G349).

CHAPTER 14: “A VERY SPECIAL GUEST”

  1. Santa J. Ono, “UBC Statement on Release of Alumna Loujain al-Hathloul,” UBC News, February 10, 2021, https://news.ubc.ca/2021/02/ubc-statement-on-release-of-alumna-loujain-al-hathloul/ (archive: perma.cc/VP4T-Z3CW).

  2. “Saudi Arabia: Release Women Human Rights Defenders Now!,” Amnesty Inter- national, accessed May 20, 2024, https://www.amnesty.ca/what-we-do/womenshuman-rights/saudi-arabia-release-women-human-rights-defenders-now/ (archive: perma.cc/8N4Q-S2BS).

  3. “Saudi Arabia: Women’s Rights Advocates Arrested,” Human Rights Watch, May 18, 2018, https://www.hrw.org/news/2018/05/18/saudi-arabia-womens-rights-advo cates-arrested.

  4. Loujain Alhathloul, “Kidnapped Freedoms,” Edinburgh International Book Festival, 2018, https://www.edbookfest.co.uk/look-and-listen/writing/freedom-papers/kid napped-freedoms.

  5. “. 26 ,. # 26 # # !” November 29, 2014, video, 0:18, https://www.youtube.comwatch?v=m7r-p7FHxqo.

  6. Robert Mackey, “Saudi Women Free after 73 Days in Jail for Driving,” New York Times, February 12, 2015, https://www.nytimes.com/2015/02/13/world/middleeastsaudi-women-free-after-73-days-in-jail-for-driving.html.

  7. Tracy McVeigh, “Fears for Female Saudi Activist as Detention for Driving a Car Is Extended,” Observer, December 13, 2014, https://www.theguardian.com/world/2014/dec/14/fears-saudi-female-acitivist-detained-driving-ban-loujain-alhathloul.

  8. Jess Staufenberg, “Saudi Arabia Is ‘Not Ready’ for Women Drivers, Says Deputy Crown Prince,” Independent, April 28, 2016, https://www.independent.co.uknews/world/middle-east/saudi-arabia-is-not-ready-for-women-drivers-saysdeputy-crown-prince-mohammed-bin-salman-a7004611.html.

  9. Stephen Kalin and Summer Said, “Saudi Women’s Rights Activist Sentenced to Nearly Six Years in Prison,” Wall Street Journal, December 28, 2020, https://www.wsj .com /articles /saudi -womens -rights -activist -convicted -byterrorism-court-11609168687.

  10. “‘I’ll Kill You . . . but before That, I’ll Rape You’: Loujain Alhathloul’s Arrest andTorture for Advocating for the Right to Drive,” DAWN, updated February 10, 2021, https://dawnmena.org/ill-kill-you-but-before-that-ill-rape-you-loujain-alhathlouls-torture-in-a-saudi-prison-2/ (archive: perma.cc/H2L2-B7XX).

  11. UN Human Rights Council Working Group on Arbitrary Detention, “Opinions Adopted by the Working Group on Arbitrary Detention at Its 87th Session, 27 April–1 May 2020: Opinion No. 33/2020 Concerning Loujain Alhathloul (United Arab Emirates and Saudi Arabia),” June 25, 2020, https://digitallibrary.un.orgrecord/3933637.

  12. “Female Activists Detained Ahead of Saudi Driving Ban Reversal,” National, May 20, 2018, https://www.thenational.scot/news/16238142.female-activists-detainedahead-saudi-driving-ban-reversal/ (archive: perma.cc/5G23-YRL8).

  13. Moustafa Bayoumi, “Mohammed bin Salman’s Talk of Reform Is a Smokescreen,”uardian, March 22, 2018, https://www.theguardian.com/commentisfree/2018/mar/22/mohammed-bin-salmans-talk-reform-smokescreen (archive: perma.cc/F9KY-VU9C).

  14. Bayoumi, “Mohammed bin Salman’s Talk of Reform.”

  15. Megan K. Stack, “The West Is Kidding Itself about Women’s Freedom in Saudi Arabia,” New York Times, August 19, 2022, https://www.nytimes.com/2022/08/19opinion/saudi-arabia-women-rights.html.

  16. “Tony Blair Consultancy Firm ‘Working with Saudi Government,’” New Arab, July 22, 2018, https://www.newarab.com/news/tony-blair-consultancy-firm-working-saudi-government (archive: perma.cc/K7N2-W44H).

  17. Alia al-Hathloul, “My Sister Is in a Saudi Prison. Will Mike Pompeo Stay Silent?,”ew York Times, January 13, 2019, https://www.nytimes.com/2019/01/13/opinionsaudi-women-rights-activist-prison-pompeo.html.

  18. Al-Hathloul, “My Sister Is in a Saudi Prison.”

  19. Joel Schectman and Christopher Bing, “Insight: How a Saudi Woman’s iPhone Revealed Hacking around the World,” Reuters, February 17, 2022, https://www.euters.com/technology/how-saudi-womans-iphone-revealed-hacking-aroundworld-2022-02-17/.

  20. Joseph Hincks, “Saudi Activist Loujain al Hathloul Is Out of Jail. But Justice Remains a Distant Hope,” Time, February 11, 2021, https://time.com/5938331/loujain-hathloul-saudi-arabia/ (archive: perma.cc/5V72-QDPR).

  21. Joel Schectman and Christopher Bing, “Pegasus: How a Glitch on a Saudi Activ- ist’s Phone Provided a Blueprint of Cyber Espionage,” Wire, February 18, 2022, https://thewire.in/world/pegasus-glitch-iphone-saudi-activist-loujain-al-hathloulblueprint (archive: perma.cc/4ZNC-TTVG).

  22. Michelle Ghoussoub, “The Saudis Offered Her Freedom if She Denied Being Tortured. She Tore Up the Deal,” CBC News, August 14, 2019, https://www.cbc.ca/news/canada/british-columbia/the-saudis-offered-her-freedom-if-she-deniedbeing-tortured-she-tore-up-the-deal-1.5247679; Walid al-Hathloul, “Canada Must Defend Women’s Rights at G20 Summit in Saudi Arabia,” National Post, November 18, 2020, https://nationalpost.com/opinion/walid-al-hathloul-canada-must-defend-womens-rights-at-g20-summit-in-saudi-arabia (archive: perma.cc/QR4K-M47Q).

  23. Bill Marczak, John Scott-Railton, Bahr Abdul Razzak, Noura al-Jizawi, Siena Anstis, Kristin Berdan, and Ron Deibert, ForcedEntry: NSO Group iMessage Zero-ClickExploit Captured in the Wild, Research Report No. 143, Citizen Lab, University of Toronto, September 13, 2021, https://citizenlab.ca/2021/09/forcedentry-nso-group-imessage-zero-click-exploit-captured-in-the-wild/ (archive: perma.cc/X8M2-GKP6).

  24. Schectman and Bing, “Insight: How a Saudi Woman’s iPhone.”

  25. Bill Marczak, John Scott-Railton, Noura al-Jizawi, Siena Anstis, and Ron Deibert, The Great iPwn: Journalists Hacked with Suspected NSO Group iMessage “Zero-Click” Exploit, Research Report No. 135, Citizen Lab, University of Toronto, December 20, 2020, https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hacked-with-sus (archive: perma.cc/MF4E-GB4V) pected-nso-group-imessage-zero-click-exploit/.

  26. Virus Bulletin, “Exploit Archaeology a Forensic History of in the Wild NSO Group Exploits Donncha Ó Cearbhaill Amnest,” October 24, 2022, video, 29:59, https://www.youtube.com/watch?v=NvS67qiq8bw (archive: perma.cc/7X3B-JUZW).

  27. Schectman and Bing, “Insight: How a Saudi Woman’s iPhone.”

  28. “About the Security Content of iOS 14.8 and iPadOS 14.8,” Apple Support, November 6, 2023, https://support.apple.com/en-ca/103150 (archive: perma.cc/CWC6-MEEY).

  29. Ian Beer and Samuel Groß, “A Deep Dive into an NSO Zero-Click iMes- sage Exploit: Remote Code Execution,” Project Zero, December 15, 2021, https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html (archive: perma.cc/C34P-LURP).

  30. Apple Newsroom, “Apple Sues NSO Group to Curb the Abuse of State-Sponsored Spyware,” press release, November 23, 2021, https://www.apple.com/newsroom/2021/11/apple-sues-nso-group-to-curb-the-abuse-of-state-sponsored-spyware/ (archive: perma.cc/F9H5-9LXV).

  31. Apple Newsroom, “Apple Sues NSO Group.”

  32. Yona TR Golding, “Q&A: The Citizen Lab’s John Scott-Railton on Tackling the Ongoing Threat of Pegasus,” Columbia Journalism Review, February 21, 2024, https://www.cjr.org/the_media_today/qa_john_scott-railton_citizen_lab_pegasusphp (archive: perma.cc/5XXM-HF8U).

  33. John Scott-Railton, Bill Marczak, Paolo Nigro Herrero, Bahr Abdul Razzak, Noura al-Jizawi, Salvatore Solimano, and Ron Deibert, Project Torogoz: Extensive Hacking of Media & Civil Society in El Salvador with Pegasus Spyware, Research Report No. 148, Citizen Lab, University of Toronto, January 12, 2022, https://citizenlab.ca/2022/01/project-torogoz-extensive-hacking-media-civil-society-el-salvador-pegasus-spyware/ (archive: perma.cc/TDY7-CNKK).

  34. John Scott-Railton, Bill Marczak, Irene Poetranto, Bahr Abdul Razzak, Sutawan Chanprasert, and Ron Deibert, GeckoSpy: Pegasus Spyware Used against Thailand’s Pro-Democracy Movement, Research Report No. 157, Citizen Lab, University of Toronto, July 17, 2022, https://citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-against-thailands-pro-democracy-movement/ (archive: perma.cc/Q8XX-P56P).

  35. Bill Marczak, John Scott-Railton, Bahr Abdul Razzak, and Ron Deibert, Triple Threat: NSO Group’s Pegasus Spyware Returns in 2022 with a Trio of iOS 15 and iOS 16 Zero- Click Exploit Chains, Research Report No. 165, Citizen Lab, University of Toronto, April 18, 2023, https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-returnsin-2022/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Nicola Lawford, and Ron Deibert, “Armenia-Azerbaijan Conflict: Pegasus Infections—Technical Brief [1],” Citizen Lab, University of Toronto, May 25, 2023, https://citizenlab.ca/2023/05/cr1-armenia-pegasus/ (archive: perma.cc/32FH-9W9L); John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Siena Anstis, and Ron Deibert, “Spyware Targeting against Serbian Civil Society,” Citizen Lab, University of Toronto, November 28, 2023, https://citizenlab.ca/2023/11/serbia-civil-society-spyware/.

  36. Dustin Volz and Tim Higgins, “Apple Notified State Department Employees of Phone Hacking Linked to NSO Group Software,” Wall Street Journal, December 3, 2021, https://www.wsj.com/articles/apple-notified-state-department-employees-ofphone-hacking-linked-to-nso-group-software-11638568687.

  37. Office of Public Affairs, “Commerce Adds NSO Group and Other Foreign Compa- nies to Entity List for Malicious Cyber Activities,” press release, US Department of Commerce, November 3, 2021, https://www.commerce.gov/news/press-releases/2021/11/commerce-adds-nso-group-and-other-foreign-companies-entity-list (archive: perma.cc/PBD5-JDGB).

  38. Davide Scigliuzzo, “Israeli Spyware Firm NSO Seen at Risk of Default as Sales Drop,” Bloomberg, November 22, 2021, https://www.bloomberg.com/news/articles2021-11-22/israeli-spyware-firm-nso-seen-at-risk-of-default-as-sales-drop (archive: perma.cc/KGQ7-7SC8).

  39. Schectman and Bing, “Insight: How a Saudi Woman’s iPhone.”

  40. Alhathloul v. DarkMatter Grp., 3:21-cv-01787-IM (D. Or. Feb. 8, 2024).

  41. “Ex–U.S. Intel Operatives Who Worked for UAE Barred from Arms Exports, State Dept Says,” Reuters, August 26, 2022, https://www.reuters.com/world/statedept-concludes-settlements-with-ex-us-intel-operatives-who-worked-uae-202208-26/.

  42. Electronic Frontier Foundation, “Saudi Human Rights Activist, Represented by EFF, Sues Spyware Maker DarkMatter for Violating U.S. Anti-Hacking and Inter- national Human Rights Laws,” press release, December 9, 2021, https://www.eff.org/press/releases/saudi-human-rights-activist-represented-eff-sues-spywaremaker-darkmatter-violating.

CHAPTER 15: THE COOLEST DICTATOR IN THE WORLD

  1. “Governance,” NSO Group, accessed May 30, 2024, https://www.nsogroup.com/governance/.

  2. Ronen Bergman and Mark Mazzetti, “Israeli Companies Aided Saudi Spying despite Khashoggi Killing,” New York Times, July 17, 2021, https://www.nytimes.com/2021/07/17/world/middleeast/israel-saudi-khashoggi-hacking-nso.html; Dan Sabbagh, David Pegg, Paul Lewis, and Stephanie Kirchgaessner, “UAE Linked to Listing of Hundreds of UK Phones in Pegasus Project Leak,” Guardian, July 21, 2021, https://www.theguardian.com/world/2021/jul/21/uae-linked-to-listing-of-hundreds-of-uk-phones-in-pegasus-project-leak (archive: perma.cc/LT29-39D4); Natalie Kitroeff and Ronen Bergman, “How Mexico Became the Biggest User of the World’s Most Notorious Spy Tool,” New York Times, April 18, 2023, https://www.nytimes.com/2023/04/18world/americas/pegasus-spyware-mexico.html.

  3. Mike Allison, “El Salvador’s Brutal Civil War: What We Still Don’t Know,” Al Jazeera, March 1, 2012, https://www.aljazeera.com/opinions/2012/3/1/el-salvadors-brutal-civil-war-what-we-still-dont-know (archive: perma.cc/L5K6-43ZJ).

  4. Allison, “El Salvador’s Brutal Civil War.”

  5. Mat Youkee, “Nayib Bukele Calls Himself the ‘World’s Coolest Dictator’—but Is He Joking?,” Observer, September 26, 2021, https://www.theguardian.com/world/2021/sep/26/naybib-bukele-el-salvador-president-coolest-dictator (archive: perma.cc/X6Z3-BZ9H).

  6. Sarah Kinosian, “Trolls, Propaganda and Fear Stoke Bukele’s Media Machine in El Salvador,” Reuters, November 29, 2022, https://www.reuters.com/investigatesspecial-report/el-salvador-politics-media/.

  7. Youkee, “Nayib Bukele Calls Himself ”; Kinosian, “Trolls, Propaganda and Fear.”

  8. Reuters, “Does Money Grow on Volcanoes? El Salvador Explores Bitcoin Mining,” Yahoo News, June 9, 2021, https://ca.finance.yahoo.com/news/does-money-grow-volcanoes-el-213733783.html (archive: perma.cc/Q8FC-QQL8).

  9. Nelson Rauda Zablah, “El Salvador’s Bitcoin Paradise Is a Mirage,” New York Times, July 2, 2022, https://www.nytimes.com/2022/07/02/opinion/bitcoin-el-salvadorbukele-crypto.html.

  10. Kinosian, “Trolls, Propaganda and Fear.”

  11. Manuel Meléndez-Sánchez, “Latin America Erupts: Millennial Authoritarianism in El Salvador,” Journal of Democracy 32, no. 3 (July 2021): 19–32, https://doi.org10.1353/jod.2021.0031.

  12. Megan Janetsky, “Amid Criticism over His War on Gangs, El Salvador’s President Bukele Turns to Sports,” Independent, July 7, 2023, https://www.independent.co.uk/news/world/americas/us-politics/nayib-bukele-ap-el-salvador-mohammed-binsalman-sport-b2371041.html.

  13. Jonathan Blitzer, “The Rise of Nayib Bukele, El Salvador’s Authoritarian President,”ew Yorker, September 5, 2022, https://www.newyorker.com/magazine/2022/09/12/the-rise-of-nayib-bukele-el-salvadors-authoritarian-president (archive: perma.cc/QRW6-F9TW).

  14. Blitzer, “Rise of Nayib Bukele.”

  15. Kinosian, “Trolls, Propaganda and Fear.”

  16. Blitzer, “Rise of Nayib Bukele.”

  17. Kinosian, “Trolls, Propaganda and Fear”; Blitzer, “Rise of Nayib Bukele.”

  18. Blitzer, “Rise of Nayib Bukele.”

  19. Blitzer, “Rise of Nayib Bukele.”

  20. Kinosian, “Trolls, Propaganda and Fear.”

  21. Jane Esberg, “All the President’s Trolls: Real and Fake Twitter Fights in El Salvador,” International Crisis Group, July 13, 2020, https://www.crisisgroup.org/latin-america-caribbean/central-america/el-salvador/all-presidents-trolls-real-andfake-twitter-fights-el-salvador.

  22. Kinosian, “Trolls, Propaganda and Fear.”

  23. Blitzer, “Rise of Nayib Bukele.”

  24. David Agren, “Nayib Bukele’s Military Stunt Raises Alarming Memories in El Salvador,” Guardian, February 16, 2020, https://www.theguardian.com/world/2020/feb/16/el-salvador-nayib-bukele-military-alarming-memories (archive: perma.cc/ZYX9-Q8XA).

  25. Scott Neuman, “Troops Occupy El Salvador’s Legislature to Back President’s Crime Package,” NPR, February 10, 2020, https://www.npr.org/2020/02/10/804407503/troops-occupy-el-salvadors-legislature-to-back-president-s-crime-package (archive: perma.cc/T7XA-Y37Z).

  26. Blitzer, “Rise of Nayib Bukele.”

  27. Blitzer, “Rise of Nayib Bukele.”

  28. Blitzer, “Rise of Nayib Bukele.”

  29. Blitzer, “Rise of Nayib Bukele”; Youkee, “Nayib Bukele Calls Himself.”

  30. Kinosian, “Trolls, Propaganda and Fear.”

  31. Kinosian, “Trolls, Propaganda and Fear.”

  32. “El Salvador,” Reporters without Borders, accessed February 9, 2024, https://rsf.orgen/country/el-salvador.

  33. “El Salvador.”

  34. Blitzer, “Rise of Nayib Bukele.”

  35. Zack Beauchamp, “Meet the MAGA Movement’s New Favorite Autocrat,” Vox, April 8, 2023, https://www.vox.com/2023/4/8/23653324/nayib-bukele-trump-americanright-crime (archive: perma.cc/3PFW-NYE8).

  36. Beauchamp, “Meet the MAGA Movement’s New Favorite Autocrat”; Blitzer, “Rise of Nayib Bukele”; Kinosian, “Trolls, Propaganda and Fear.”

  37. Beauchamp, “Meet the MAGA Movement’s New Favorite Autocrat.”

  38. Ronan Farrow, “A Hacked Newsroom Brings a Spyware Maker to U.S. Court,” New Yorker, November 30, 2022, https://www.newyorker.com/news/news-desk/a-hacked-newsroom-brings-a-spyware-maker-to-us-court-pegasus (archive: perma.cc/BQ2T-HECQ).

  39. Juan Pappier, “‘We Can Arrest Anyone We Want’: Widespread Human Rights Viola- tions under El Salvador’s ‘State of Emergency,’” Human Rights Watch, December 7, 2022, https://www.hrw.org/report/2022/12/07/we-can-arrest-anyone-we-want/widespread-human-rights-violations-under-el (archive: perma.cc/LWS7-L8FZ).

  40. Ellen Ioanes, “El Salvador’s Massive New Prison and the Strongman behind It, Explained,” Vox, March 5, 2023, https://www.vox.com/world-politics/2023/3/5/23621004/el-salvador-prison-bukele-ms13-barrio-18 (archive: perma.cc/9RXK-FE9U).

  41. Associated Press, “US Accuses El Salvador of Secretly Negotiating Truce with Gang Leaders,” Guardian, December 8, 2021, https://www.theguardian.com/world/2021/dec/08/el-salvador-us-gang-leaders-truce (archive: perma.cc/5DRA-49A8).

  42. Carlos Martínez, Óscar Martínez, Sergio Arauz, and Efren Lemus, “Bukele Has Been Negotiating with MS-13 for a Reduction in Homicides and Electoral Support,” El Faro, September 6, 2020, https://elfaro.net/en/202009/el_salvador/24785Bukele-Has-Been-Negotiating-with-MS-13-for-a-Reduction-in-Homicides-andElectoral-Support.htm (archive: perma.cc/VRL8-5XED); Carlos Martínez, “Collapsed Government Talks with MS-13 Sparked Record Homicides in El Salvador, Audios Reveal,” El Faro, May 17, 2022, https://elfaro.net/en/202205/el_salvador/0000026177-collapsed-governmenttalks-with-ms-13-sparked-record-homicides-in-el-salvador-audios-reveal?u= (archive: perma.cc/CJF6-V9XV) st-full_text=all&tpl= 11&utm_source=farotext&utm_medium=initdocu&utmcampaign=text-0000026177_collapsed-government-talks-with-ms-13-sparkedrecord-homicides-in-el-salvador-audios-reveal.

  43. Carlos Martínez, “Collapsed Government Talks with MS-13.”

  44. Associated Press, “US Accuses El Salvador.”

  45. John Scott-Railton (@jsrailton), tweet thread, Thread Reader, February 25, 2024, https://threadreaderapp.com/thread/1629318031766884352.html (archive: perma.cc/9832-U923).

  46. Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  47. Blitzer, “Rise of Nayib Bukele”; Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  48. Blitzer, “Rise of Nayib Bukele.”

  49. John Scott-Railton, Bill Marczak, Paolo Nigro Herrero, Bahr Abdul Razzak, Noura al-Jizawi, Salvatore Solimano, and Ron Deibert, Project Torogoz: Extensive Hacking of Media & Civil Society in El Salvador with Pegasus Spyware, Research Report No. 148, Citizen Lab, University of Toronto, January 12, 2022, https://citizenlab.ca/2022/01/project-torogoz-extensive-hacking-media-civil-society-el-salvador-pegasus-spyware/ (archive: perma.cc/TDY7-CNKK).

  50. Carlos Martínez et al., “Bukele Has Been Negotiating with MS-13.”

  51. Scott-Railton et al., Project Torogoz, appendix A.

  52. Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  53. Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  54. Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  55. Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  56. Farrow, “Hacked Newsroom Brings a Spyware Maker.”

  57. Nelson Rauda Zablah, “Pegasus Spyware Was Used to Hack Reporters’ Phones. I’m Suing Its Creators,” Guardian, December 5, 2022, https://www.theguardian.comcommentisfree/2022/dec/05/pegasus-spyware-journalists-phone-hacking-lawsuit.

  58. Scott-Railton et al., Project Torogoz.

  59. Sam Jones, “Pegasus Spyware Used in ‘Jaw-Dropping’ Phone Hacks on El Salvador Journalists,” Guardian, January 13, 2022, https://www.theguardian.com/news/2022/jan/13/pegasus-spyware-target-journalists-activists-el-salvador (archive: perma.cc/77GG-AANK).

  60. Maria Abi-Habib, “Journalists in El Salvador Targeted with Spyware Intended for Criminals,” New York Times, January 12, 2022, https://www.nytimes.com/2022/0112/world/americas/el-salvador-journalists-spyware.html.

  61. Jones, “Pegasus Spyware Used in ‘Jaw-Dropping’ Phone Hacks.”

  62. José de Córdoba and Santiago Pérez,“Pegasus Spyware Deployed against El Salvador Journalists and Activists,” Wall Street Journal, January 12, 2022, https://www.wsj.com/articles/pegasus-spyware-deployed-against-around-35-el-salvador-journalists11642040676.

  63. Córdoba and Pérez, “Pegasus Spyware Deployed.”

  64. Natalie Kitroeff and Ronen Bergman, “Mexican President Said He Told Ally Not to Worry about Being Spied On,” New York Times, May 23, 2023, https://www.nytimes.com/2023/05/23/world/americas/mexico-president-spying-pegasus.html.

  65. Mary Beth Sheridan and Craig Timberg, “Report: 22 Journalists at Salvadoran News Site Hit with Pegasus Hack,” Washington Post, January 12, 2022, https://www.washingtonpost.com/world/2022/01/12/salvador-pegasus-faro-nso/ (archive: perma.cc/6445-KCGZ).

  66. Jose Luis Benitez, “El Salvador’s Pegasus Spyware Case Left Uninvestigated Ten Months Later,” Global Voices, November 16, 2022, https://globalvoices.org/2022/11/16/el-salvadors-pegasus-spyware-case-left-uninvestigated-ten-months-laterent-is-reluctant-to-investigate/ (archive: perma.cc/D79U-NA4D).

  67. Benitez, “El Salvador’s Pegasus Spyware Case.”

  68. Xenia Oliva, “Fiscalía defiende al gobierno ante CIDH y afirma que no espía a peri- odistas con Pegasus,” GatoEncerrado, March 17, 2022, https://gatoencerrado.news/2022/03/17/fiscalia-defiende-al-gobierno-ante-la-cidh-y-afirma-que-no-espia-aperiodistas-con-pegasus/.

  69. Roman Gressier, “El Salvador Obtained Three New Spyware Tools in 2020 from Israeli Intermediary,” El Faro, January 30, 2023, https://elfaro.net/en/202301/elsalvador/26688/El-Salvador-Obtained-Three-New-Spyware-Tools-in-2020-fromIsraeli-Intermediary.htm (archive: perma.cc/7ZTU-HE25); “Tracer,” Wave Guard Technologies, accessed July 29, 2004, https://waveguardtechnologies.com/tracer/ (archive: perma.cc/8EEH-3YGR).

  70. Gressier, “El Salvador Obtained Three New Spyware Tools.”

  71. Gressier, “El Salvador Obtained Three New Spyware Tools.”

  72. Gressier, “El Salvador Obtained Three New Spyware Tools.”

  73. Jorge Beltrán Luna, “Familiar de director del OIE, vinculado a empresa de espio- naje en México,” ElSalvador.com (archive: perma.cc/EFK8-E2WA), January 14, 2022, https://historico.elsalvador.com/historico/918150/espionaje-oie-pegasus-periodistas.html.

  74. Carolina de Assis, “Congresso de El Salvador ‘legaliza espionagem digital’ após escândalo Pegasus que afetou jornalistas,” LatAm Journalism Review, February 9, 2022, https://latamjournalismreview.org/pt-br/articles/apos-escandalo-pegasus-el-salvador-legaliza-espionagem-digital-e-preocupa-jornalistas/ (archive: perma.cc/BVS2-VZEN).

  75. Assis, “Congresso de El Salvador.”

  76. Gabriel Labrador and Óscar Martínez, “One Year under a Police State in El Salvador,” El Faro, March 31, 2023, https://elfaro.net/en/202303/el_salvador/26793one-year-under-a-police-state-in-el-salvador (archive: perma.cc/MZ75-UZQS).

  77. “El Salvador’s Congress Votes to Allow Mass Trials in Gang Crackdown,” Al Jazeera, July 26, 2023, https://www.aljazeera.com/news/2023/7/26/el-salvadors-congress-votes-to-allow-mass-trials-in-gang-crackdown (archive: perma.cc/L8VK-S4B8).

  78. “El Salvador’s Congress Votes to Allow Mass Trials.”

  79. Will Grant, “El Salvador Gangs: Mass Arrests Bring Calm but at What Price?,” BBC, May 18, 2023, https://www.bbc.com/news/world-latin-america-65596471 (archive: perma.cc/2VCT-PUDP).

  80. Marcos Alemán, “El Salvador Extends State of Exception in Gang Crackdown,” Associated Press, July 20, 2022, https://apnews.com/article/arrests-nayib-bukele-el-salvador-san-gangs-2a865def685627ecaf5a56de8247609e (archive: perma.cc/M75Z-ZCW3).

  81. Luke Taylor, “El Salvador News Outlet Relocates to Costa Rica to Avoid Bukele’s Crackdown,” Guardian, April 19, 2023, https://www.theguardian.com/world/2023/apr/19/el-faro-el-salvador-moves-nayib-bukele (archive: perma.cc/F5BX-9PNB).

  82. Taylor, “El Salvador News Outlet Relocates.”

  83. Kinosian, “Trolls, Propaganda and Fear.”

  84. “El Salvador’s Bukele Claims Landslide Election Win,” Al Jazeera, February 4, 2024, https://www.aljazeera.com/news/2024/2/4/el-salvador-votes-with-nayib-bukele-poised-for-second-presidential-term (archive: perma.cc/6ZC6-QFGQ).

  85. “El Salvador President Pledges White-Collar Prison in ‘War’ on Corruption,” Reuters, June 1, 2023, https://www.reuters.com/world/americas/el-salvador-presi dent-pledges-white-collar-prison-war-corruption-2023-06-02/.

  86. “El Salvador President Pledges White-Collar Prison.”

  87. “Honduras Extends, Expands State of Emergency for Second Time,” Reuters, February 21, 2023, https://www.reuters.com/world/americas/honduras-extends-ex pands-state-emergency-second-time-2023-02-21/.

  88. Sonia Pérez D., “Guatemala’s Presidential Hopefuls Channel Heavy-Handed Tactics of El Salvador’s Leader,” Associated Press, June 5, 2023, https://apnews.com/article/guatemala-president-election-security-bukele-6dff69e741871ffe17 ead623d451f221.

  89. Will Grant and James Gregory, “Haiti: US to Boost Funding for Foreign Secu- rity Force as Violence Grips Country,” BBC, March 11, 2024, https://www.bbc.comnews/world-latin-america-68540753; See also https://x.com/nayibbukele/status1766698383132012674 (archive: perma.cc/JHS3-CHG5).

  90. Julia Gavarrete, “15 Members of El Faro Sue NSO in US Federal Court for Pegasus Hacks,” El Faro, November 30, 2022, https://elfaro.net/en/202211/el_salvador26559/15-Members-of-El-Faro-Sue-NSO-in-US-Federal-Court-for-PegasusHacks.htm (archive: perma.cc/MGF3-MTXB).

  91. “El Salvador Journalists Sue Spyware Maker in US Court,” Associated Press, November 30, 2022, https://apnews.com/article/technology-business-canada-israel-middle-east-1b16abed6e33242c72e2bd07a28cc075 (archive: perma.cc/4HYG-T9KH).

  92. Nelson Rauda Zablah, “Pegasus Spyware Was Used to Hack Reporters’ Phones. I’m Suing Its Creators,” Guardian, December 5, 2022, https://www.theguardian.com/commentisfree/2022/dec/05/pegasus-spyware-journalists-phone-hacking-lawsuit.

  93. Michael Gennaro, “Salvadoran Journalists’ Suit against Israeli Spyware Supplier Doesn’t Belong in US, Judge Rules,” Courthouse News Service, March 8, 2024, https://www.courthousenews.com/salvadoran-journalists-suit-against-israelispyware-supplier-not-in-us-jurisdiction-judge-rules/.

  94. Gennaro, “Salvadoran Journalists’ Suit.”

  95. “Dada v. NSO Group,” Knight First Amendment Institute at Columbia University, accessed May 31, 2024, http://knightcolumbia.org/cases/dada-v-nso-group (archive: perma.cc/4U4K-BKGH).

CHAPTER 16: “FINALLY A EUROPEAN STATE”

  1. John Scott-Railton, Elies Campo, Bill Marczak, Bahr Abdul Razzak, Siena Anstis, Gözde Böcü, Salvatore Solimano, and Ron Deibert, CatalanGate: Extensive Merce- nary Spyware Operation against Catalans Using Pegasus and Candiru, Research Report No. 155, Citizen Lab, University of Toronto, April 18, 2022, https://citizenlab.ca/2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalansusing-pegasus-candiru/.

  2. Paul Kirby, “Spain Dismisses Spy Chief in Pegasus Phone Spyware Scandal,” BBC, May 10, 2022, https://www.bbc.com/news/world-europe-61391849 (archive: perma.cc/J6DK-K6AH).

  3. Andrés Villena-Oliver, Bernabé Aldeguer, and Delio Lucena-Piquero, “Invisible Rulers: The ‘Latent Power Structure’ in Two Spanish Governments (2004 and 2012),” Government and Opposition 59, no. 1 (2024): 130–145.

  4. Ximena Villagrán, “El CNI pagó más de 200.000 euros a Hacking Team para espiar móviles,” El Confidencial, July 7, 2015, https://www.elconfidencial.com/tecnologia/2015-07-06/cni-hackers-team-espionaje-contratos_916216/ (archive: perma.cc/C44W-K8BR).

  5. Stephanie Kirchgaessner and Sam Jones, “Phone of Top Catalan Politician ‘Targeted by Government-Grade Spyware,’” Guardian, July 13, 2020, https://www.theguardian.com/world/2020/jul/13/phone-of-top-catalan-politician-targeted-bygovernment-grade-spyware (archive: perma.cc/C2CC-SFUJ).

  6. “Torrent y Maragall fueron espiados por un programa exclusivo de los gobiernos,” ElPeriódico, July 14, 2020, https://www.elperiodico.com/es/politica/20200714/parlamentroger-torrent-espia-movil-catalunya-8038888 (archive: perma.cc/6H7R-2QZ3); Stephanie Kirchgaessner, Sam Jones, and Jennifer Rankin, “Second Catalan Politician Says Phone Was Targeted by Spyware,” Guardian, July 14, 2020, https://www.theguardian.com/world/2020/jul/14second-catalan-politician-says-phone-was-targeted-by-spware; Kirchgaessner and Jones, “Phone of Top Catalan Politician ‘Targeted,’”; Sam Jones and Stephanie Kirch- gaessner, “Who Has Been Using Spyware on Catalan Independence Campaigners?,” Guardian, July 17, 2020, https://www.theguardian.com/world/2020/jul/17/whohas-been-using-spyware-on-catalan-independence-campaigners; “Report Alleges Targeting of Swiss-Based Catalan Separatist’s Phone,” SWI swissinfo.ch (archive: perma.cc/RS6J-ZYJN), July 14, 2020, https://www.swissinfo.ch (archive: perma.cc/RS6J-ZYJN)/eng/politics/report-alleges-targeting-of-swiss-basedcatalan-separatist-s-phone/45902640; Raquel Castillo and John Miller, “Spanish Supreme Court Orders Arrest of Former Catalan MP Anna Gabriel,” Reuters, February 21, 2018, https://www.reuters.com/article/idUSKCN1G515G/.

  7. Vicente Rodriguez, “Catalonia,” Encyclopedia Britannica, updated July 28, 2024, https://www.britannica.com/place/Catalonia (archive: perma.cc/U9ZZ-FPF2).

  8. James Sturcke, “Catalan Conundrum,” Guardian, June 7, 2006, https://www.theguardian.com/world/2006/jun/07/spain.jamessturcke (archive: perma.cc/9VJQ-NNL3).

  9. Spanish Constitution, Boletín Oficial del Estado, https://www.boe.es/buscar/pdf1978/BOE-A-1978-40001-consolidado.pdf.

  10. Sam Jones and Stephen Burgen, “Catalan Referendum: Preliminary Results Show 90% in Favour of Independence,” Guardian, October 1, 2017, https://www.theguardian.com/world/2017/oct/01/dozens-injured-as-riot-police-storm-catalanref-polling-stations (archive: perma.cc/S84Z-5K3D).

  11. “Catalan referendum: ‘Hundreds hurt’ as police try to stop voters,” BBC News, October 1, 2017, https://www.bbc.com/news/world-europe-41461032 (archive: perma.cc/8ZW5-YQ5J).

  12. Isa Soares, Vasco Cotovio, and Hilary Clarke, “Catalonia Referendum Result Plunges Spain into Political Crisis,” CNN, October 2, 2017, https://www.cnn.com/2017/10/01/europe/catalonia-spain-independence-referendum-result/index.html.

  13. “Spain: Police Used Excessive Force in Catalonia,” Human Rights Watch, October 12, 2017, https://www.hrw.org/news/2017/10/12/spain-police-used-excessive-force-catalonia (archive: perma.cc/Z7T3-HBPA); “Spain: Excessive Use of Force by National Police and Civil Guard in Catalonia,” Amnesty International, October 3, 2017, https://www.amnesty.org/en/latest/news/2017/10/spain-excessive-use-of-force-by-national-police-and-civilguard-in-catalonia-2/.

  14. “UN Human Rights Chief Urges Probe into Violence during Referendum in Cata- lonia,” UN News, October 2, 2017, https://news.un.org/en/story/2017/10/567542 (archive: perma.cc/WRR5-N4ZX).

  15. “Catalonia Independence: Rajoy Dissolves Catalan Parliament,” BBC, October 27, 2017, https://www.bbc.com/news/world-europe-41783289 (archive: perma.cc/V97G-ADFX).

  16. Sam Jones, “Catalan Leaders Facing Rebellion Charges Flee to Belgium,” Guardian, October 31, 2017, https://www.theguardian.com/world/2017/oct/30/spanish-prosecutor-calls-for-rebellion-charges-against-catalan-leaders; Stephen Burgen, “Catalan Politicians Charged a Year after Independence Vote,” Guardian, November 2, 2018, https://www.theguardian.com/world/2018/nov/02/catalan-politicians-charged-a-yearafter-independence-vote-referendum.

  17. Stephen Burgen and Sam Jones, “New Generation, New Tactics: The Changing Face of Catalan Protests,” Guardian, October 18, 2019, https://www.theguardiancom/world/2019/oct/18/new-generation-new-tactics-the-changing-face-ofcatalan-protests.

  18. Sam Jones, “Spanish Government Pardons Nine Jailed Catalan Leaders,”uardian, June 22, 2021, https://www.theguardian.com/world/2021/jun/22/spanish-government-pardons-nine-jailed-catalan-leaders (archive: perma.cc/E32X-TSMU).

  19. Jones, “Spanish Government Pardons Nine.”

  20. Nicholas Casey and Raphael Minder, “In Bid to End Secession Dispute, Spain Tries Talking with Catalonia,” New York Times, September 15, 2021, https://www.nytimes.com/2021/09/15/world/europe/catalonia-spain-sanchez-aragones.html.

  21. “Aragonès Calls to ‘Strengthen’ Catalonia in Face of Spanish ‘Authoritarianism,’” Catalan News, February 14, 2022, https://www.catalannews.com/politics/item/aragones-calls-to-strengthen-catalonia-in-face-of-spanish-authoritarianism (archive: perma.cc/YM3G-NCHL).

  22. Miguel González, “Los servicios secretos españoles tienen el programa que espió a Torrent,” El País, July 15, 2020, https://elpais.com/espana/2020-07-15/los-servicios-de-informacion-tienen-programas-como-el-que-espio-a-torrent.html (archive: perma.cc/M7K6-Q92Q).

  23. Lorenzo Franceschi-Bicchierai and Joseph Cox, “Source: Spain Is Customer of NSO Group,” Vice, July 14, 2020, https://www.vice.com/en/article/pkyzxz/spain-nso-group-pegasus-catalonia (archive: perma.cc/4RLJ-4BS2).

  24. Nicolas Tomás, “El CNI admite haber espiado a Aragonès y el entorno de Puig- demont con autorización,” El Nacional, May 5, 2022, https://www.elnacional.cat/es/politica/cni-espiado-independentismo-aval-judicial_752346_102.html (archive: perma.cc/44BA-MCEM).

  25. Jones, “Spanish Government Pardons.”

  26. Alexandra Borgeaud, “Market Share Held by Smartphone Operating Systems in Spain from 2017 to 2023, by Month,” Statista, August 1, 2023, https://www.statista.com/statistics/260419/market-share-held-by-smartphone-operating-systems-inspain/.

  27. “Would You Click?,” Citizen Lab, updated December 23, 2022, https://catalonia.citizenlab.ca/ (archive: perma.cc/N92K-2ZQ2).

  28. Ronan Farrow, “How Democracies Spy on Their Citizens,” New Yorker, April 18, 2022, https://www.newyorker.com/magazine/2022/04/25/how-democracies-spy-on-their-citizens (archive: perma.cc/HL54-QF7S).

  29. “Democracies Shouldn’t Surrender to a Future of Limitless Surveillance,” editorial, Washington Post, April 21, 2022, https://www.washingtonpost.com/opinions/202204/21/democracies-should-write-rules-spyware-not-abuse-it/.

  30. Sam Jones, “Catalan President Calls for Investigation as Spyware Targets Pro- Independence Leaders,” Guardian, April 19, 2022, https://www.theguardian.comworld/2022/apr/19/catalan-president-calls-for-investigation-as-spyware-targetspro-independence-leaders.

  31. Jones, “Catalan President Calls for Investigation.”

  32. Nicolas Tomás, “ERC Calls for Support from Junts: ‘Head-on Opposition Would Not Be Understood,’” El Nacional, October 10, 2022, https://www.elnacional.caten/politics/erc-calls-support-junts-opposition-not-understood-catalonia_897888102.html.

  33. Fernando Heller, “‘Catalan Gate’ Puts Spanish Government Stability at Risk Ahead of Crucial Vote,” Euractiv, April 27, 2022, https://www.euractiv.com/section/politics/short_news/catalan-gate-puts-spanish-government-stability-at-risk-ahead-of-crucial-vote/ (archive: perma.cc/G8SQ-YUD6).

  34. “Spanish Prime Minister’s Mobile Phone Infected by Pegasus Spyware, Govern- ment Says,” Reuters, May 2, 2022, https://www.reuters.com/world/europe/spanishprime-ministers-telephone-infected-by-pegasus-spyware-2022-05-02/.

  35. Nicolas Tomás, “Spanish Minister Robles, Defiant on CatalanGate Espionage: ‘Go to the Courts,’” El Nacional, April 26, 2022, https://www.elnacional.cat/en/politicsspanish-minister-robles-defiant-catalangate_747783_102.html (archive: perma.cc/Z5AP-WCFZ).

  36. “Spanish Defense Minister, on Espionage: ‘What Should a State Do When Someone Declares Independence?,’” Catalan News, April 27, 2022, https://www.catalannews.com/politics/item/spanish-defense-minister-on-espionage-what-should-a-statedo-when-someone-declares-independence.

  37. Sam Jones, “Spanish Prime Minister’s Phone ‘Targeted with Pegasus Spyware,’”uardian, May 2, 2022, https://www.theguardian.com/world/2022/may/02/spain-prime-minister-pedro-sanchez-phone-pegasus-spyware (archive: perma.cc/G5QB-5GVW).

  38. “Spyware in Spain Targeted the Prime Minister and His Enemies,” Economist, May 7, 2022, https://www.economist.com/europe/spyware-in-spain-targeted-the-primeminister-and-his-enemies/21809099; Mayte Piulachs, “Catalangate Could End Up in Hands of a Judge at Spain’s National Audience,” El Nacional, May 2, 2022, https://www.elnacional.cat/en/politics/catalangate-hands-judge-spain-nationalaudience_750840_102.html (archive: perma.cc/6TFW-GZBS); J.M. Zuloaga, “Marlaska, el miembro del Gobierno al que han robado más datos de su teléfono,” La Razón, May 11, 2022, https://www.arazon.es/espana/20220510/gwxedc4drzhali5bqi4vbhk7kq.html; Sophie in ’t Veld, Report of the Investigation of Alleged Contraventions and Maladministration in the Applica- tion of Union Law in Relation to the Use of Pegasus and Equivalent Surveillance Spyware, Committee of Inquiry to Investigate the Use of Pegasus and Equivalent Surveil- lance Spyware, European Parliament, May 22, 2023, https://www.europarl.europaeu/doceo/document/A-9-2023-0189_EN.pdf.

  39. “Luis Planas Puchades, nuevo embajador en Marruecos,” El Mundo, April 30, 2004, https://www.elmundo.es/elmundo/2004/04/30/espana/1083337276.html (archive: perma.cc/AK68-MJTM).

  40. Sam Jones, “Catalans Demand Answers after Spanish Spy Chief Confirms Phone Hacking,” Guardian, May 5, 2022, https://www.theguardian.com/world/2022/may/05/catalans-demand-answers-after-spanish-spy-chief-confirms-phone-hacking (archive: perma.cc/5L6G-UFFV).

  41. Jones, “Catalans Demand Answers”; Nicolas Tomás, “Spain’s CNI Admits Spying on Aragonès and on Puigdemont’s Circle, with Court Approval,” El Nacional, May 5, 2022, https://www.elnacional.cat/en/politics/spain-cni-admits-spying-catalan-inde pendence-judge_752448_102.html.

  42. Tomás, “Spain’s CNI Admits Spying.”

  43. Adam Hulcoop, John Scott-Railton, Peter Tanchak, Matt Brooks, and Ron Deibert, Tainted Leaks: Disinformation and Phishing with a Russian Nexus, Research Report No. 92, Citizen Lab, University of Toronto, May 25, 2017, https://citizenlab.ca/2017/05/tainted-leaks-disinformation-phish/ (archive: perma.cc/4EKM-Y8NB).

  44. “Pegasus Infection of Galina Timchenko, Exiled Russian Journalist and Publisher,”Citizen Lab, September 13, 2023, https://citizenlab.ca/2023/09/pegasus-infection-of-galina-timchenko-exiled-russian-journalist-and-publisher/ (archive: perma.cc/TH6E-UABW); John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Ksenia Ermoshina, Siena Anstis, and Ron Deibert, By Whose Authority? Pegasus Targeting of Russian & Belarusian-Speaking Opposition Activists and Independent Media in Europe, Research Report No. 176, Citizen Lab, University of Toronto, May 30, 2024, https://citizenlab.ca/2024/05/pegasus-russian-belarusian-speaking-opposition-media-europe/ (archive: perma.cc/A5PS-TLA5).

  45. “Russia Labels Two Canadian Schools, Democracy NGO as ‘Undesirable Organi- zations,’” Radio Free Europe/Radio Liberty, March 18, 2024, https://www.rferl.orga/russia-labels-canadian-schools-ngo-undesirable/32867431.html.

  46. Jeffrey Knockel, Cross-Country Exposure: Analysis of the MY2022 Olympics App, Research Report No. 149, Citizen Lab, University of Toronto, January 18, 2022, https://citizenlab.ca/2022/01/cross-country-exposure-analysis-my2022-olympics-app/ (archive: perma.cc/E8HA-2D2U).

  47. Mona Wang, Pellaeon Lin, and Jeffrey Knockel, Should We Chat? Privacy in the WeChat Ecosystem, Research Report No. 167, Citizen Lab, University of Toronto, June 28, 2023, https://citizenlab.ca/2023/06/privacy-in-the-wechat-ecosystem-full-report/ (archive: perma.cc/BG3J-974Q).

  48. Bill Marczak and John Scott-Railton, Move Fast and Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings, Research Report No. 126, Citizen Lab, University of Toronto, April 3, 2020, https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/ (archive: perma.cc/FE6T-LBCG).

  49. Sam Jones, “Spain’s Spy Chief Sacked after Pegasus Spyware Revelations,” Guardian, May 10, 2022, https://www.theguardian.com/world/2022/may/10/spains-spy-chief-paz-esteban-sacked-after-pegasus-spyware-revelations (archive: perma.cc/S9QW-PS6R).

  50. Jose Javier Olivas (@josejolivas), “This is a thread on the curious #catalangate and on the presumed espionage of separatist leaders in Catalonia. First a disclaimer: I do not intend to defend in any way the Spanish secret services, whose in my view either for action or omission have contributed to the scandal 1/,” X, April 23, 2022, https://x.com/josejolivas/status/1517996367939084288 (archive: perma.cc/GM4T-SR4Y).

  51. Ariel Kahana, “‘NSO Accusations Were Part of International Disinformation Campaign,’” Israel Hayom, September 2, 2022, https://www.israelhayom.com/202209/02/the-accusations-against-nso-were-part-of-a-disinformation-campaign/ (archive: perma.cc/N9D3-QEKX).

  52. Alfonso Valero, “Presentación / Introduction,” Foro de Profesores, February 15, 2019, https://paginadelforodeprofesores.wordpress.com/ (archive: perma.cc/429X-TGXE).

  53. Carlos Conde Solares, “Re: Independent Investigation Request on Citizen Lab’s Report ‘CatalanGate: Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru,’” email, July 5, 2022, https://paginadelforodeprofesores.wordpress.com/wp-content/uploads/2022/07/letter-to-university-of-toronto-by-foro-de-profesores-5-july-2022-re-catalangate-report.pdf (archive: perma.cc/D6CH-NRZA).

  54. Jose Javier Olivas Osuna, The Pegasus Spyware Scandal: A Critical Review of Citizen Lab’s “CatalanGate” Report, March 2023, https://doi.org/10.13140/RG.2.2.17511.93603.

  55. Stephanie Kirchgaessner and Sam Jones, “Pegasus Spyware Inquiry Targeted by Disinformation Campaign, Say Experts,” Guardian, November 28, 2022, https://www.theguardian.com/world/2022/nov/28/pegasus-eu-parliament-spyware-inquiry-targeted-disinformation-campaign (archive: perma.cc/3FYE-T9RF); Antoaneta Roussi, “EU Spyware Inquiry Fails to Put Spain on List of Fact-Finding Trips,” Politico, July 7, 2022, https://www.politico.eu/article/pedro-sanchez-spain-spyware-inquirys-visit-fallsflat-for-fear-of-embarrassment/.

  56. Runa Sandvik, “Fact Check: Gregorio Martin’s Presentation to the European Parliament,” Untidy (blog), March 18, 2023, https://www.untidy.news/p/fact-check-gregorio-martins-presentation (archive: perma.cc/QDJ9-2G8Z); Jonathan Scott, Uncovering the Citizen Lab—An Analytical and Technical Review Disproving CatalanGate, July 2022, https://staticecestaticos.com/file/b9e/fff/e37/b9efffe37b7e3cf717aa7cd584db8fba.pdf.

  57. Runa Sandvik, “Fact Check: José Javier Olivas-Osuna’s Review of Citizen Lab’s CatalanGate Report,” Untidy (blog), March 16, 2023, https://www.untidy.newsp/fact-check-jose-javier-olivas-osunas.

  58. Ronald Deibert, “About the Citizen Lab’s CatalanGate Report,” Ronald Deibert, May 14, 2022, https://deibert.citizenlab.ca/2022/05/about-the-citizen-labs-catalangate-report/ (archive: perma.cc/KWE9-ZHUM) .

  59. Jose Javier Olivas (@josejolivas), “Apple keeps on funding Citizens Lab via the Ford Foundation and #CitizenLab still conceals in their ‘academic reports’ that Apple (and who knows what other big techs) fund their research that blame others for security breaches 958/ @UofT @munkschool https://T.Co/s4QFoqPDAy,” X, March 12, 2024, https://x.com/josejolivas/status/1767452378188431766 (archive: perma.cc/HE4A-5HRC).

  60. Quico Sallés, “La Guàrdia Civil va espiar durant mesos l’investigador del Catalan- gate,” El Món, January 18, 2024, https://elmon.cat/politica/tribunals/guardia-civilespiar-mesos-investigador-catalangate-787559/ (archive: perma.cc/N6EJ-F8HQ).

  61. “Windows Kernel Elevation of Privilege Vulnerability: CVE-2021-31979,” Micro- soft Security Update Guide, July 13, 2021, https://msrc.microsoft.com/updateguide/vulnerability/CVE-2021-31979; “Windows Kernel Elevation of Privilege Vulnerability: CVE-2021-33771,” Microsoft Security Update Guide, July 13, 2021, https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33771 (archive: perma.cc/WEW9-X4Z3).

  62. Microsoft Threat Intelligence, “Protecting Customers from a Private-Sector Offen- sive Actor Using 0-Day Exploits and DevilsTongue Malware,” Microsoft Secu- rity, July 15, 2021, https://www.microsoft.com/en-us/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/ (archive: perma.cc/FSB6-NN3C).

  63. “Consell de Degans i Deganes Emèrits i Emèrites,” Bar, accessed May 29, 2024, https://www.icab.cat/en/colegi/coneix-el-col-legi/organs-consultius/consell-dedegans-i-deganes-emerits-i-emerites/index.html (archive: perma.cc/VTZ2-YFUP); “Former Presidents,” FBE, accessed May 29, 2024, https://www.fbe.org/about/former-presidents/ (archive: perma.cc/444A-HSFJ).

  64. Quino Petit and Miguel González, “Ronald Deibert, fundador de Citizen Lab: ‘Los gobiernos usan Pegasus porque tienen apetito de espiar,’” El País, May 14, 2022, https://elpais.com/espana/2022-05-15/ronald-deibert-fundador-de-citizen-lab-los-gobiernos-usan-pegasus-porque-tienen-apetito-de-espiar.html (archive: perma.cc/X3G5-CHJ7); Sam Jones, “Use of Pegasus Spyware on Spain’s Politicians Causing ‘Crisis of Democracy,’” Guardian, May 15, 2022, https://www.theguardian.com/world/2022/may/15/use-of-pegasus-spyware-on-spains-politicians-causing-crisis-of-democracy (archive: perma.cc/PD9K-L6XJ).

  65. “Investigation of the Use of Pegasus and Equivalent Surveillance Spyware,” Euro-pean Parliament, June 7, 2023, https://www.europarl.europa.eu/thinktank/en/document/EPRS_ATA(2023)747923 (archive: perma.cc/Q62P-BCCJ).

  66. Cornelia Ernst (@ErnstCornelia), “Truly unbelievable and an insult to all MPs: The secret service chief from #Spain reads a bit of blah blah off the page, then simply refuses to answer our 28 questions and leaves the @EP_PegaInquiry. Here is our transcript of today’s hearing: https://cornelia-ernst.eu/2022/11/country-hearingspain-29-november/ (archive: perma.cc/N52C-GXYD) #CatalanGate,” X, November 29, 2022, https://x.comErnstCornelia/status/1597558061828214785; Efi Koutsokosta, “All Questions and No Answers, as Spanish Spy Chief Stays Mute on Pegasus Hacking Scandal,” Euronews, November 29, 2022, https://www.euronews.com/my-europe/2022/1129/all-questions-and-no-answers-as-spanish-spy-chief-stays-mute-on-pegasushacking-scandal.

  67. Jones, “Use of Pegasus Spyware on Spain’s Politicians.”

  68. Laura Hülsemann, “Spanish Court Halts Probe into Israeli Spyware Hacking of Pedro Sánchez’s Phone,” Politico, July 10, 2023, https://www.politico.eu/article/spain-shutters-investigation-into-pegasus-hacking-of-pedro-sanchez-phone/ (archive: perma.cc/5KAK-BWPX).

  69. “Spain Reopens Israeli Spyware Probe, Sharing Information with France,” Reuters, April 23, 2024, https://www.reuters.com/technology/cybersecurity/spain-reopensisraeli-spyware-probe-sharing-information-with-france-2024-04-23/.

  70. Lorenzo Franceschi-Bicchierai and Carly Page, “Hackers Used Spyware Made in Spain to Target Users in the UAE, Google Says,” TechCrunch, March 29, 2023, https://techcrunch.com/2023/03/29/hackers-variston-spyware-uae-google/ (archive: perma.cc/59P6-VWDS).

  71. “Barcelona Emerges as New Cyber-Offensive Hub in Europe,” Intelligence Online, July 21, 2023, https://www.intelligenceonline.com/surveillance—interception/202307/21/barcelona-emerges-as-new-cyber-offensive-hub-in-europe,110005885-gra.

CHAPTER 17: EUROPE FLOODED WITH WATERGATES

  1. Elena Becatoros, “Greece: Intelligence Chief Resigns amid Spyware Allegations,” Courthouse News Service, August 5, 2022, https://www.courthousenews.comgreece-intelligence-chief-resigns-amid-spyware-allegations/.

  2. “Greek Spy Chief Resigns over Israeli Spyware Surveillance Claims,” New Arab, August 7, 2022, https://www.newarab.com/news/greek-spy-chief-resigns-over-israeli-spyware-claims (archive: perma.cc/SZX8-PXRF).

  3. “History of EYP,” Εθνική Υπηρεσία Πληροφοριών, accessed June 1, 2024, https://www.nis.gr/en/agency/historical-background (archive: perma.cc/FT57-Y94K).

  4. Helena Smith, “Journalists Who Revealed Greek Wiretapping Scandal Appear in Court,” Guardian, January 25, 2024, https://www.theguardian.com/world/2024/jan/25/journalists-who-revealed-greek-wiretapping-scandal-appear-in-court (archive: perma.cc/TY5Q-QYSW).

  5. Bill Marczak, John Scott-Railton, Bahr Abdul Razzak, Noura al-Jizawi, Siena Anstis, Kristin Berdan, and Ron Deibert, Pegasus vs. Predator: Dissident’s Doubly- Infected iPhone Reveals Cytrox Mercenary Spyware, Research Report No. 147, Citizen Lab, University of Toronto, December 16, 2021, https://citizenlab.ca/2021/12pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenaryspyware/.

  6. Marczak et al., Pegasus vs. Predator.

  7. Saska Cvetkoska, Ivana Nasteska, Bojan Stojanovski, Tasos Telloglou, Eliza Trianta- fillou, and Miroslava Simonovska, “Israeli Company Developed Spyware in Skopje, Local Officials Looked the Other Way,” Investigative Reporting Lab Macedonia, April 12, 2023, https://irl.mk/israeli-company-developed-spyware-in-skopje-local-officials-looked-the-other-way/ (archive: perma.cc/6HFY-95GG).

  8. Patrick Howell O’Neill, “The Lucrative Government Spyware Industry Has a New ‘One-Stop-Shop’ for Hacking Everything,” Gizmodo, February 15, 2019, https://gizmodo.com/the-lucrative-government-spyware-industry-has-a-new-one-1832568791 (archive: perma.cc/48PG-CYNV).

  9. Marczak et al., Pegasus vs. Predator.

  10. Thomas Brewster, “A Multimillionaire Surveillance Dealer Steps Out of the Shadows . . . and His $9 Million WhatsApp Hacking Van,” Forbes, August 5, 2019, https://www.forbes.com/sites/thomasbrewster/2019/08/05/a-multimillionairesurveillance-dealer-steps-out-of-the-shadows-and-his-9 -million-whatsapphacking-van/.

  11. Mark Mazzetti, Ronen Bergman, and Matina Stevis-Gridneff, “How the Global Spyware Industry Spiraled Out of Control,” New York Times, December 8, 2022, https://www.nytimes.com/2022/12/08/us/politics/spyware-nso-pegasus-paragonhtml.

  12. Tasos Telloglou et al., “Flight of the Predator,” Lighthouse Reports, November 30, 2022, https://www.lighthousereports.com/investigation/flight-of-the-predator/ (archive: perma.cc/6RJG-NPEF).

  13. Grace Woodruff, “What We Know about the Secretive Company behind the Pegasus Spy Software,” Slate, July 20, 2021, https://slate.com/technology/2021/07/nso-group-pegasus-spyware.html (archive: perma.cc/K8AV-WW25).

  14. Mazzetti, Bergman, and Stevis-Gridneff, “How the Global Spyware Industry Spiraled.”

  15. David Agranovich and Mike Dvilyanski, “Taking Action against the Surveillance- for-Hire Industry,” Meta, December 16, 2021, https://about.fb.com/news/2021/12/taking-action-against-surveillance-for-hire/ (archive: perma.cc/HM6J-P8AL).

  16. Agranovich and Dvilyanski, “Taking Action.”

  17. Nektaria Stamouli, “Data, Spies and Indifference: How Mitsotakis Survived His ‘Watergate,’” Balkan Insight, June 12, 2023, https://balkaninsight.com/2023/06/12data-spies-and-indifference-how-mitsotakis-survived-his-watergate/.

  18. Tasos Telloglou and Eliza Triantafyllou, “Who Was Tracking the Mobile Phone of Journalist Thanasis Koukakis?,” Inside Story, April 11, 2022, https://insidestory.grarticle/who-was-tracking-mobile-phone-journalist-thanasis-koukakis.

  19. Telloglou and Triantafyllou, “Who Was Tracking the Mobile Phone?”

  20. Telloglou and Triantafyllou, “Who Was Tracking the Mobile Phone?”

  21. Omer Benjakob, “‘Great Alarm’: First Detected Use of Mysterious Israeli Spyware on EU National,” Haaretz, April 19, 2022, https://www.haaretz.com/israel-news/tech-news/2022-04-19/ty-article/israeli-predator-spyware-foundin-phone-of-top-greek -investigative -reporter /00000180 -6565 -dc5d -a1cd757f069c0000; Telloglou and Triantafyllou, “Who Was Tracking the Mobile Phone?”

  22. Benjakob, “‘Great Alarm.’”

  23. Thanasis Koukakis (@nasoskook), “Η κυβέρνηση τοποθετήθηκε στο δημοσίευμα του @insidestory_gr με τη βεβαιότητα πως η παρακολούθηση μου έγινε από ιδιώτη. Αναμένω το πόρισμα της ΑΔΑΕ που θα επιβεβαιώνει τον ισχυρισμό αυτό,” X, April 11, 2022, https://twitter.com/nasoskook/status/1513459956581871616 (archive: perma.cc/W6VJ-VRCA).

  24. Koukakis (@nasoskook), “Η κυβέρνηση τοποθετήθηκε στο δημοσίευμα του.”

  25. Nikolas Leontopoulos and Thodoris Chondrogiannos, “Εχθρός του Κράτους: Αποδεικνύουμε ότι η κυβέρνηση Μητσοτάκη παρακολουθούσε τον δημοσιογράφο Θανάση Κουκάκη,” Reporters United, April 15, 2022, https://www.reportersunited.gr/8646/eyp-koukakis/.

  26. Leontopoulos and Chondrogiannos, “Εχθρός του Κράτους.”

  27. “Four Greek Investigative Journalists Say Intelligence Authorities Followed Them, Tracked Their Phones,” Committee to Protect Journalists, November 4, 2022, https://cpj.org/2022/11/four-greek-investigative-journalists-say-intelligence-authorities-followed-them-tracked-their-phones/ (archive: perma.cc/2F97-UCNX).

  28. “Four Greek Investigative Journalists.”

  29. “Four Greek Investigative Journalists.”

  30. “Four Greek Investigative Journalists.”

  31. Spiros Sideris, “EU Commission Alarmed by New Spyware Case against Greek Socialist Leader,” Euractiv, July 27, 2022, https://www.euractiv.com/section/politics/news/eu-commission-alarmed-by-new-spyware-case-against-greek-socialist-leader/ (archive: perma.cc/G7T2-M564).

  32. Sideris, “EU Commission Alarmed by New Spyware.”

  33. Benjakob, “‘Great Alarm.’”

  34. Moira Lavelle, “Reporters Dig Up More Links between Greek Government and Spyware,” Al Jazeera, November 17, 2022, https://www.aljazeera.com/news/2022/11/17/reporters-dig-up-more-links-between-greek-government-and-spyware (archive: perma.cc/XB3W-G5J8); Helena Smith, “Greek PM denies knowing about tapping of opponent’s phone,” Guardian, August 8, 2022, https://www.theguardian.com/world/2022/aug/08/greekpm-denies-knowing-about-tapping-of-opponents-phone.

  35. “Greek Spy Chief Resigns.”

  36. Jason Horowitz and Niki Kitsantonis, “A Greek Scandal Reverberates as Eavesdrop- ping Expands in Europe,” New York Times, August 12, 2022, https://www.nytimes.com2022/08/12/world/europe/greece-surveillance-europe-kyriakos-mitsotakis.html.

  37. “Hungary 2023,” Amnesty International, https://www.amnesty.org/en/location/europe-and-central-asia/western-central-and-south-eastern-europe/hungary/report-hungary/ (archive: perma.cc/RSY3-X54V); Paul Kirby and Nick Thorpe, “Who Is Viktor Orban, Hungarian PM with 14-Year Grip on Power?,” BBC, February 13, 2024, https://www.bbc.comnews/world-europe-67832416.

  38. Szabó and Vissy v. Hungary, No. 37138/14 (ECtHR Jan. 12, 2016).

  39. András Király, “Mi ez a kémszoftver, amit a hírszerzésünk és a titkosszolgálatunk is használ?,” 444, July 8, 2015, https://444.hu/2015/07/08/mi-ez-a-kemszoftver-amit-a-hirszerzesunk-es-a-titkosszolgalatunk-is-hasznal (archive: perma.cc/695U-EA6T).

  40. Marczak et al., Pegasus vs. Predator.

  41. Marczak et al., Pegasus vs. Predator.

  42. Shaun Walker, “Viktor Orbán Using NSO Spyware in Assault on Media, Data Suggests,” Guardian, July 18, 2021, https://www.theguardian.com/news/2021/jul/18/viktor-orban-using-nso-spyware-in-assault-on-media-data-suggests (archive: perma.cc/C4FB-UYJM).

  43. “Hungary: The Government Must Provide a Meaningful Response to the Pegasus Scandal,” Amnesty International, July 20, 2021, https://www.amnesty.org/en/latest/press-release/2021/07/hungary-the-government-must-provide-a-meaningful-response-to-the-pegasus-scandal/ (archive: perma.cc/XV2F-D7MV).

  44. Szabolcs Panyi and András Pethö, “Hungarian Journalists and Critics of Orbán Were Targeted with Pegasus, a Powerful Israeli Cyberweapon,” Direkt36, July 19, 2021, https://www.direkt36.hu/en/leleplezodott-egy-durva-izraeli-kemfegyver-az-orban-kormany-kritikusait-es-magyar-ujsagirokat-is-celba-vettek-vele/ (archive: perma.cc/D6SH-CQVU).

  45. Walker, “Viktor Orbán Using NSO Spyware.”

  46. Walker, “Viktor Orbán Using NSO Spyware.”

  47. Stephanie Kirchgaessner, “Phones of Journalist Who Tracked Viktor Orban’s Child- hood Friend Infected with Spyware,” Guardian, September 21, 2021, https://www.theguardian.com/news/2021/sep/21/hungary-journalist-daniel-nemeth-phonesinfected-with-nso-pegasus-spyware (archive: perma.cc/E3HY-SH2N).

  48. Kirchgaessner, “Phones of Journalist.”

  49. Kassai Zsigmond, “Nyomozást rendelt el az ügyészség Pegasus-ügyben,” 24.hu (archive: perma.cc/55GT-4685), July 22, 2021, https://24.hu (archive: perma.cc/55GT-4685)/belfold/2021/07/22/pegasus-kemprogram-ugyeszsegnyomozat/.

  50. “Hungarians Protest against Alleged Illegal Surveillance with Pegasus Spyware,” Reuters, July 27, 2021, https://www.reuters.com/world/europe/hungarians-protestagainst-alleged-illegal-surveillance-with-pegasus-spyware-2021-07-26/.

  51. Justin Spike, “Hungary: Politicians Demand Inquiry into Alleged Spying,” Associ- ated Press, July 19, 2021, https://apnews.com/article/technology-europe-hungary-5d42379b6ee15a4f309f4ae022c0f536 (archive: perma.cc/5KKE-PZ6S).

  52. Committee on Civil Liberties, Justice and Home Affairs, mission report, November 26, 2021, https://www.europarl.europa.eu/meetdocs/2014_2019/plmrep/COMMITTEES/LIBE/DV/2021/11-29/MissionreportHungary_EN.pdf (archive: perma.cc/4ZKP-59XZ).

  53. “Hungary Admits to Using Pegasus Spyware,” DW, April 11, 2021, https://www.dw.com/en/hungary-admits-to-using-nso-groups-pegasus-spyware/a-59726217.

  54. Walker, “Viktor Orbán Using NSO Spyware.”

  55. Szabolcs Panyi, “The Inside Story of How Pegasus Was Brought to Hungary,” Direkt36, September 28, 2022, https://www.direkt36.hu/en/feltarulnak-a-pegasus-kemszoftver-beszerzesenek-rejtelyei/ (archive: perma.cc/PWY7-V5DX).

  56. Marton Dunai, “Hungary’s Orban Welcomes Netanyahu, Vows to Fight Anti-Sem- itism,” Reuters, July 18, 2017, https://www.reuters.com/article/idUSKBN1A31G8/.

  57. Vlad Makszimov, “Hungary Hires Ex-Pegasus Spyware Lobbyist,” Euractiv, January 24, 2022, https://www.euractiv.com/section/politics/short_news/hungary-hires-ex-pegasus-spyware-lobbyist/ (archive: perma.cc/4LHY-7EEV).

  58. “Viktor Orban’s Intelligence Corps Keeps Watch in Brussels,” Intelligence Online, February 6, 2023, https://www.intelligenceonline.com/government-intelli gence/2023/02/06/viktor-orban-s-intelligence-corps-keeps-watch-in-brussels109910285-art.

  59. “Hungarian Intelligence Presses Ahead with Reforms in Midst of Upheavals,” Intel- ligence Online, January 9, 2023, https://www.intelligenceonline.com/governmentintelligence/2023/01/09/hungarian-intelligence-presses-ahead-with-reforms-inmidst-of-upheavals,109879509-art.

  60. Tani Goldstein, “Israeli Firm to Sell Social Media–Tracking Software to Orban’s Hungary,” Times of Israel, September 28, 2022, https://www.timesofisrael.com/israeli-firm-to-sell-social-media-tracking-software-to-orbans-hungary/.

  61. Stephanie Kirchgaessner, “More Polish Opposition Figures Found to Have Been Targeted by Pegasus Spyware,” Guardian, February 17, 2022, https://www.theguardian.com/world/2022/feb/17/more-polish-opposition-figures-found-tohave-been-targeted-by-pegasus-spyware (archive: perma.cc/88YR-5CKM).

  62. Federico Guerrini, “Pegasus Spyware Scandals Highlight Global Dangers as Activ- ists Demand Action,” Forbes, September 14, 2023, https://www.forbes.com/sites/federicoguerrini/2023/09/14/pegasus-spyware-scandals-highlight-global-dangers-as-activists-demand-action/ (archive: perma.cc/U9QC-JYUZ).

  63. Siena Anstis, “Litigation and Other Formal Complaints Related to Mercenary Spyware,” Citizen Lab, University of Toronto, December 12, 2018, https://citizenlab.ca/2018/12/litigation-and-other-formal-complaints-concerning-targeted-digitalsurveillance-and-the-digital-surveillance-industry/; Guerrini, “Pegasus Spyware Scandals Highlight Global Dangers.”

  64. Evon Huber, “Donald Tusk Claims ‘Witch Hunt’ in Warsaw Intelligence Probe,”inancial Times, April 19, 2017, https://www.ft.com/content/3a8c83e0-2508-11e7-a34a-538b4cb30025 (archive: perma.cc/9RDL-S5UR).

  65. Guerrini, “Pegasus Spyware Scandals Highlight Global Dangers.”

  66. Vanessa Gera, “Two More Poles Identified as Victims of Hacking with Spyware,” Associated Press, January 25, 2022, https://apnews.com/article/technology-europe-poland-hacking-spyware-4a410bda35df566632703e3578e5a99d (archive: perma.cc/BD7D-4FSX).

  67. Gera, “Two More Poles Identified.”

  68. “Citizen Lab: Andrzej Malinowski inwigilowany Pegasusem,” TVN24, April 19, 2022, https://tvn24.pl/polska/pegasus-w-polsce-citizen-lab-andrzej-malinowski-in wigilowany-pegasusem-byly-prezes-pracodawcow-pr-komentuje-st5679884.

  69. Tasos Telloglou and Eliza Triantafyllou, “Greek Ministry of Foreign Affairs Secret Investigation Reveals Spyware Export Licenses,” Inside Story, May 7, 2023, https://insidestory.gr/article/greek-ministry-foreign-affairs-secret-investigationreveals-predator-spyware-export-licenses.

  70. “Who Is ‘Hemedti,’ General behind Sudan’s Feared RSF Force?,” Al Jazeera, April 16, 2023, https://www.aljazeera.com/news/2023/4/16/who-is-hemedti-the-puppeteer-behind-sudans-feared-rsf-fighters (archive: perma.cc/V8Y6-UAHT); Telloglou et al., “Flight of the Predator.”

  71. Telloglou et al., “Flight of the Predator.”

  72. “Freedom in the World 2024: Equatorial Guinea,” Freedom House, https://freedom house.org/country/equatorial-guinea/freedom-world/2024.

  73. “Report: Police Raid Israeli Spyware Company’s Offices in Greece,” Haaretz, December 14, 2022, https://www.haaretz.com/israel-news/security-aviation/202212-14/ty-article/report-police-raid-israeli-spyware-companys-offices-in-greece00000185-0f4b-d26d-a1b7-dfdfb9710000.

  74. Lavelle, “Reporters Dig Up More Links”; Nikolas Leontopoulos and Thodoris Chondrogiannos, “Μεσοτοιχία το Μαξίμου με το Predator,” Reporters United, August 4, 2022, https://www.reportersunited.gr/9529/mesotoichia-to-maximoy-meto-predator/ (archive: perma.cc/Q3KB-KALN).

  75. “Greece: SLAPP Award Winner Grigoris Dimitriadis Urged to Drop Defama- tion Lawsuits,” European Centre for Press and Media Freedom, October 21, 2022, https://www.ecpmf.eu/greece-slapp-award-winner-grigoris-dimitriadis-urged-to-drop-defamation-lawsuits/ (archive: perma.cc/3HZE-M8PB).

  76. Lavelle, “Reporters Dig Up More Links.”

  77. Alessio Giussani, “‘Predatorgate,’ Dozens of Greek Ministers and Journalists under Surveillance,” Osservatorio Balcani e Caucaso Transeuropa, November 9, 2022, https://www.balcanicaucaso.org/eng/Areas/Greece/Predatorgate-dozens-ofGreek-ministers-and-journalists-under-surveillance-221605; “Predator,” Documento, accessed May 29, 2024, https://www.documentonews.gr/tag/predator/ (archive: perma.cc/LJW5-FZ29).

  78. Matina Stevis-Gridneff, “Meta Manager Was Hacked with Spyware and Wire- tapped in Greece,” New York Times, March 20, 2023, https://www.nytimes.com/202303/20/world/europe/greece-spyware-hacking-meta.html.

  79. Stevis-Gridneff, “Meta Manager Was Hacked.”

  80. Stevis-Gridneff, “Meta Manager Was Hacked.”

  81. Stevis-Gridneff, “Meta Manager Was Hacked.”

  82. Eliza Triantafyllou and Tasos Telloglou, “Predatorgate: Τι έγραφαν τα SMS-παγίδα που έλαβαν επιχειρηματίες, υπουργοί και δημοσιογράφοι,” Inside Story, July 27, 2023, https://insidestory.gr/article/predatorgate-ti-egrafan-ta-sms-pagida-poy-elavanepiheirimaties-ypoyrgoi-kai-dimosiografoi.

  83. Nektaria Stamouli, “Greek Spyware Inquiry Ends in Stalemate,” Politico, October 11, 2022, https://www.politico.eu/article/greek-spyware-inquiry-ends-in-stalemate/ (archive: perma.cc/C96G-7ANP).

  84. Derek Gatopoulos, “Greece to Ban Spyware as Wiretap Scandal Grows,” Associ- ated Press, December 8, 2022, https://apnews.com/article/europe-greece-athens-government-14ea14a86dfecbf628395ff0674339a5 (archive: perma.cc/3HD4-E5WS).

  85. Eleni Stamatoukou, “Greek Court Clears State Institutions of Involvement with Illegal Spyware,” Balkan Insight, July 30, 2024, https://balkaninsight.com/2024/07/30/greek-court-clears-state-institutions-of-involvement-with-illegalspyware/.

  86. “About | PEGA | Committees | European Parliament,” European Parliament, accessed June 1, 2024, https://web.archive.org/web/20240519141132/https://www.uroparl.europa.eu/committees/en/pega/about.

  87. European Parliament, “Spyware: MEPs Sound Alarm on Threat to Democracy and Demand Reforms,” press release, May 8, 2023, https://www.europarl.europa.eunews/en/press-room/20230505IPR84901/spyware-meps-sound-alarm-on-threatto-democracy-and-demand-reforms.

  88. European Parliament, “Spyware Inquiry: Statement of Committee Coordina- tors on Polish Authorities’ Refusal to Cooperate,” press release, September 15, 2022, https://www.europarl.europa.eu/news/en/press-room/20220915IPR40601/statement-of-pega-coordinators-on-polish-authorities-refusal-to-cooperate (archive: perma.cc/JMN8-6J84).

  89. Vincent Manancourt and Shannon Van Sant, “EU Spyware Probe Has a Problem:Spain,” Politico, November 28, 2022, https://www.politico.eu/article/eu-spyware-probe-problem-spain-pedro-sanchez-margaritas-robles/ (archive: perma.cc/VHK8-SFXR).

  90. Elisa Braun, Gian Volpicelli, and Eddie Wax, “The Qatargate Files: Hundreds of Leaked Documents Reveal Scale of EU Corruption Scandal,” Politico, December 4, 2023, https://www.politico.eu/article/european-parliament-qatargate-corruption-scandal-leaked-documents-pier-antonio-panzeri-francesco-giorgi-eva-kaili/ (archive: perma.cc/RZL5-E4MS).

  91. Braun, Volpicelli, and Wax, “Qatargate Files.”

  92. Nektaria Stamouli and Shannon Van Sant, “Probe Slams ‘4 or 5’ EU Governments for Spyware Use,” Politico, November 8, 2022, https://www.politico.eu/article/eu-spyware-probe-slams-government-leaders-as-perpetrators-of-abuse/ (archive: perma.cc/9JXU-CBAA).

  93. Eugenia Lostri, “PEGA Committee Votes on Spyware Recommendations,” Lawfare, May 17, 2023, https://www.lawfaremedia.org/article/pega-committee-votes-on-spy ware-recommendations; “LIBE Committee’s Opinion Fails to Include a Total Ban on the Use of Spyware in the European Media Freedom Act,” EDRi, July 20, 2023, https://edri.org/our-work/eu-parliament-libe-committee-opinion-spyware-ban-euro (archive: perma.cc/G2VA-9TB8) pean-media-freedom-act/.

  94. Niki Kitsantonis, “With His Party Ahead in Elections, Greek Leader Claims ‘Polit- ical Earthquake,’” New York Times, May 21, 2023, https://www.nytimes.com/202305/21/world/europe/greece-elections-new-democracy.html.

  95. Julia Tar, “EU Looks the Other Way as Greek Spyware Mess Heralds More Trouble,”uractiv, July 28, 2023, https://www.euractiv.com/section/law-enforcement/news/eu-looks-the-other-way-as-greek-spyware-mess-heralds-more-trouble/ (archive: perma.cc/N4UG-GYL4).

  96. Andrew Higgins, “Donald Tusk Chosen as Poland’s Prime Minister after Rival Is Rejected,” New York Times, December 11, 2023, https://www.nytimes.com/2023/1211/world/europe/poland-donald-tusk-government.html.

  97. “Premier zaskoczył podczas narady z prezydentem. Ujawnił dokument ws. Pega- susa,” Polskie Radio 24, February 13, 2024, https://polskieradio24.pl/artykul/333 (archive: perma.cc/8YQQ-HNKH) 4313,premier-zaskoczyl-podczas-narady-z-prezydentem-ujawnil-dokument-wspegasusa.

  98. “Almost 600 People Targeted with Pegasus Spyware under Former Polish Govern- ment,” Notes from Poland, April 16, 2024, https://notesfrompoland.com/202404/16/almost-600-people-targeted-with-pegasus-spyware-under-former-polishgovernment/.

  99. Wojciech Kość, “Poland Launches Pegasus Spyware Probe,” Politico, February 19, 2024, https://www.politico.eu/article/poland-pegasus-spyware-probe-law-and-justice-pis-jaroslaw-kaczynski/ (archive: perma.cc/FYC3-NHDC).

  100. US Department of State, “The United States Adds Foreign Companies to Entity List for Malicious Cyber Activities,” press release, July 18, 2023, https://www.state.gov/the-united-states-adds-foreign-companies-to-entity-list-for-malicious-cyberactivities-2/.

  101. Elias Groll, “U.S. Sanctions Maker of Predator Spyware,” CyberScoop, March 5, 2024, https://cyberscoop.com/predator-intellexa-cytrox-sanctions/ (archive: perma.cc/7Y7S-H7VX); US Depart- ment of the Treasury, “Treasury Sanctions Members of the Intellexa Commercial Spyware Consortium,” press release, May 5, 2024, https://home.treasury.gov/newspress-releases/jy2155.

  102. Bill Marczak, John Scott-Railton, Daniel Roethlisberger, Bahr Abdul Razzak, Siena Anstis, and Ron Deibert, Predator in the Wires: Ahmed Eltantawy Targeted with Predator Spyware after Announcing Presidential Ambitions, Research Report No. 171, Citizen Lab, University of Toronto, September 22, 2023, https://citizenlab.ca/202309/predator-in-the-wires-ahmed-eltantawy-targeted-with-predator-spyware-afterannouncing-presidential-ambitions/.

  103. “About the Security Content of iOS 17.0.1 and iPadOS 17.0.1,” Apple Support, November 15, 2023, https://support.apple.com/en-us/106369 (archive: perma.cc/X7FV-68BS).

  104. Office of the Spokesperson, “The United States Adds Sandvine to the Entity List for Enabling Human Rights Abuses,” press release, US Department of State, February 28, 2024, https://www.state.gov/the-united-states-adds-sandvine-to-the-entity-list-for-enabling-human-rights-abuses/ (archive: perma.cc/GA62-KANL).

  105. Eleni Stamatoukou, “US Sanctions Spyware Enablers at Centre of Greek Wiretap- ping Scandal,” Balkan Insight, September 17, 2024, https://balkaninsight.com/202409/17/us-sanctions-enablers-of-spyware-at-centre-of-greek-wiretapping-scandal/.

Chapter 18: MS. KANIMBA GOES TO WASHINGTON

  1. Stephanie Kirchgaessner, “Hotel Rwanda Activist’s Daughter Placed under Pegasus Surveillance,” Guardian, July 19, 2021, https://www.theguardian.com/news/2021/jul/19/hotel-rwanda-activist-daughter-pegasus-surveillance (archive: perma.cc/2N79-LXB8).

  2. “History and Jurisdiction,” House Permanent Select Committee on Intelli- gence, accessed June 1, 2024, https://intelligence.house.gov/about/history-and-jurisdiction.htm (archive: perma.cc/39KZ-EKH4).

  3. “Combatting the Threats to U.S. National Security from the Proliferation of Foreign Commercial Spyware,” US House Permanent Select Committee on Intel- ligence, July 27, 2022, https://docs.house.gov/Committee/Calendar/ByEvent.aspxEventID=115048.

  4. “Combatting the Threats to U.S. National Security”; Miles Kenyon, “John Scott- Railton Delivers Testimony to House Permanent Select Committee on Intelli- gence,” Citizen Lab, University of Toronto, July 27, 2022, https://citizenlab.ca/2022/07/john-scott-railton-delivers-testimony-to-house-permanent-select-committee-on-intelligence/ (archive: perma.cc/CB4B-8V4D).

  5. “Combatting the Threats to U.S. National Security.”

  6. “Combatting the Threats to U.S. National Security.”

  7. Adam Durbin, “Paul Rusesabagina: Hotel Rwanda Hero and Government Critic Arrives in US,” BBC, March 30, 2023, https://www.bbc.com/news/world-africa-65120307 (archive: perma.cc/ZEM4-8TBS).

  8. Petula Dvorak, “She Escaped the Genocide in Rwanda. Now, 27 Years Later, She Can’t Escape Its Politics,”Washington Post,February 25,2021,https://www.washingtonpost.com/local/she-escaped-the-genocide-in-rwanda-now-27-years-later-she-cantescape-its-politics/2021/02/25/bfb2ea26-7786-11eb-948d-19472e683521_storyhtml.

  9. Arthur Asiimwe, “‘Hotel Rwanda’ Hero in Bitter Controversy,” Reuters, August 9, 2007, https://www.reuters.com/article/idUSL04209686/.

  10. “Paul Rusesabagina: From Hotel Rwanda Hero to Convicted Terrorist,” BBC, September 20, 2021, https://www.bbc.com/news/world-africa-58604468 (archive: perma.cc/9YRU-APAD).

  11. “Combatting the Threats to U.S. National Security.”

  12. Durbin, “Paul Rusesabagina.”

  13. “‘Hotel Rwanda’ Hero Given 25-Year Sentence in ‘Terrorism’ Case,” Al Jazeera, September 20, 2021, https://www.aljazeera.com/news/2021/9/20/rwanda-court-finds-hotel-rwanda-hero-guilty-in-terrorism-case (archive: perma.cc/E4QB-VEZ5).

  14. “Hotel Rwanda Hero Paul Rusesabagina Freed from Prison,” Al Jazeera, March 24, 2023, https://www.aljazeera.com/news/2023/3/24/hotel-rwanda-hero-paul-rusesa bagina-prison-sentence-commuted.

  15. “‘Hotel Rwanda’ Proceedings Were a Show Trial,” Clooney Foundation for Justice, September 20, 2021, https://cfj.org/news/hotel-rwanda-proceedingswere-a-show-trial/; “Rwanda’s Rusesabagina Guilty Verdict Declared Unfair by ABA Center for Human Rights,” American Bar Association, September 23, 2021, https://www.americanbar.org/news/abanews/aba-news-archives/2021/09/rwandantrial-verdict/.

  16. Bill Marczak, John Scott-Railton, Sarah McKune, Bahr Abdul Razzak, and Ron Deibert, Hide and Seek: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries, Research Report No. 113, Citizen Lab, University of Toronto, September 18, 2018, https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/ (archive: perma.cc/G4DD-YL6J).

  17. Mehul Srivastava and Tom Wilson, “Inside the WhatsApp Hack: How an Israeli Technology Was Used to Spy,” Financial Times, October 29, 2019, https://www.ft.com/content/d9127eae-f99d-11e9-98fd-4d6c20050229.

  18. Michela Wrong, Do Not Disturb: The Story of a Political Murder and an African Regime Gone Bad (New York: PublicAffairs, 2021).

  19. Michela Wrong, “Rwandans Have Long Been Used to Pegasus-Style Surveillance,”uardian, July 23, 2021, https://www.theguardian.com/commentisfree/2021/jul/23/rwanda-pegasus-surveillance (archive: perma.cc/59VB-LJ2X).

  20. “Combatting the Threats to U.S. National Security.”

  21. “Combatting the Threats to U.S. National Security.”

  22. Stephanie Kirchgaessner and Diane Taylor, “Nephew of Jailed Hotel Rwanda Dissi- dent Hacked by NSO Spyware,” Guardian, July 18, 2022, https://www.theguardian.com/world/2022/jul/18/nephew-of-jailed-hotel-rwanda-dissident-hacked-by-nsospyware.

  23. “Combatting the Threats to U.S. National Security.”

  24. “Combatting the Threats to U.S. National Security.”

  25. “Combatting the Threats to U.S. National Security.”

  26. Judy Trinh, “Welcomed by Canada for Defying a Dictator, Syrian Activist Now Considered a Security Risk,” CTV News, June 23, 2023, https://www.ctvnews.ca/canada/welcomed-by-canada-for-defying-a-dictator-syrian-activist-nowconsidered-a-security-risk-1.6453244.

  27. The Citizen Lab’s forthcoming report on digital transnational repression is coau- thored by Noura Aljizawi, Siena Anstis, Marcus Michaelsen, Veronica Arroyo, Shaila Baran, Maria Bikbulatova, Gözde Böcü, Camila Franco, Arzu Geybulla, MuetterIliqud, Nicola Lawford, Émilie LaFlèche, Gabby Lim, Levi Meletti, Maryam Mirza, Zoe Panday, Claire Posno, Zoë Reichert, Berhan Taye, and Angela Yang, with Ron Deibert as Principal Investigator.

  28. Dina Temple-Raston and Sean Powers, “Pegasus Is Listening: Q&A with Paul Ruse- sabagina’s Daughter Carine Kanimba,” Record, August 1, 2022, https://therecord.media/pegasus-is-listening-a-q-and-a-with-paul-rusesabaginas-daughter-carinekanimba.

  29. “Combatting the Threats to U.S. National Security.”

  30. Jonathan Scott, Exonerating Rwanda: The Spyware Case of Carine Kanimba, 2022, https://doi.org/10.13140/RG.2.2.18522.41922 (content removed by author, but archived link can be found here: https://web.archive.org/web/20230602055352https://www.researchgate.net/publication/366298195_Exonerating_Rwanda_TheSpyware_Case_of_Carine_Kanimba) (archive: perma.cc/QB4V-N6G5).

  31. Jonathan Scott (@jonathandata1), “The forensics report was sent to me from Carine Kanimba. I provide all my comms with her, proof of false Pegasus infections, & I provide validation of my claims via @ZecOps an unaffiliated 3rd party who discovered these results before me. It’s a smear campaign against Rwanda,” Twitter, September 3, 2022, https://web.archive.org/web/20220903072623/https://twittercom/jonathandata1/status/1565963934930292736.

  32. Jonathan Scott, Registration Statement Pursuant to the Foreign Agents Regis- tration Act of 1938, as Amended, US Department of Justice, December 27, 2023, https://efile.fara.gov/docs/7355-Registration-Statement-20231227-1.pdf (archive: perma.cc/LZN6-5S73).

  33. Jonathan Scott, Exhibit A to Registration Statement Pursuant to the Foreign Agents Registration Act of 1938, as Amended, US Department of Justice, December 27, 2023, https://efile.fara.gov/docs/7355-Exhibit-AB-20231227-1.pdf (archive: perma.cc/4WYY-YZDR) (archive: perma.cc/4WYY-YZDR); Jonathan Scott, Exhibit B to Registration Statement Pursuant to the Foreign Agents Registration Act of 1938, as Amended, US Department of Justice, December 27, 2023, https:// efile.fara.gov/docs/7355-Exhibit-AB-20231227-1.pdf (archive: perma.cc/4WYY-YZDR).

  34. Cthulhu (@Cthulhu_Answers), “So here we go. A thread exposing a major fuck up by Rwanda National Police in the recruiting of Jonathan Boyd Scott aka Jonathan Lee Villarreal and a curious Russian connection. A thread,” X, January 7, 2024, https://x.com/Cthulhu_Answers/status/1744057582757806467 (archive: perma.cc/JTB5-EJ9P).

  35. Rwanda National Police, “RNP Has Not Hired Jonathan Scott,” press release, January 6, 2024, https://police.gov.rw/media/press-releases/press-in-details/news/rnp-has-not-hired-jonathan-scott/ (archive: perma.cc/3B2F-9679).

  36. Runa Sandvik, “Fact Check: Jonathan Scott’s Report on Morocco,” Untidy (blog), March 6, 2023, https://www.untidy.news/p/fact-check-jonathan-scotts-report (archive: perma.cc/E85A-2JCT).

  37. Alberto Daniel Hill—CYBERMIDNIGHT CLUB, “Facts: The Carine Kanimba False Positive Spyware Case & CatalanGate,” September 8, 2022, video, 1:57:10, https://www.youtube.com/watch?v=VD3XhWUI8Fs (archive: perma.cc/3HZL-3UKR).

  38. Jose Javier Olivas (@josejolivas), “However that (false positive) ‘infection’ still fed into an statement for an investigation for presumed illegal espionage by Rwandan government on Carine Kanimba. Formal statement here on 27 July 2021 (5 day after): https://docs.house.gov/meetings/IG/IG00/20220727/115048/HHRG-117IG00-Wstate-KanimbaC-20220727.pdf&ved=2ahUKEwiWgcyJ1vr5AhUdg_0HHRduDRMQFnoECAoQAQ&usg=AOvVaw3GyIfwBO9TuMAWmKRmDLZ . . . 453/,” X, September 4, 2022, https://x.com/josejolivas/status1566371514756243456 (archive: perma.cc/FK29-MBUW); Jose Javier Olivas (@josejolivas), “Precisely the false indi- cator/process ‘Diagnosticd’ they had already acknowledged to be a false positive in July 2021, appears in the first place as indicator of compromise in the report Amnesty Tech wrote and was submitted with Carine Kanimba complaint. 454/,” X, September 4, 2022, https://x.com/josejolivas/status/1566371536411533313 (archive: perma.cc/9GQ8-CLJU); Jose Javier Olivas (@josejolivas), “It didn’t matter to @citizenlab who in June 2022 wrote another formal statement (@UofT @munkschool) to support the claim of illegal surveillance on Carine Kanimba omitting the fact that in her case there was at least a false positive . This could have legal implications 458/,” X, September 4, 2022, https://x.com/josejolivas/status/1566371591897989121 (archive: perma.cc/AJ92-T9ZQ).

  39. Jose Javier Olivas (@josejolivas), “Runa acting as Runa. #metoo ,” X, May 17, 2023, https://x.com/josejolivas/status/1658876851316457495 (archive: perma.cc/XD2X-2KEF).

  40. Ariel Kahana, “‘NSO Accusations Were Part of International Disinformation Campaign,’” Israel Hayom, September 2, 2022, https://www.israelhayom.com/202209/02/the-accusations-against-nso-were-part-of-a-disinformation-campaign/ (archive: perma.cc/ZQ9J-DFKK).

  41. Ariel Kahana, “ NSO ” Israel Hayom, September 1, 2022, https://www.israelhayom.co.il/news/geopoliticsarticle/13023319 (archive: perma.cc/HL5L-45KG).

  42. Runa Sandvik, “Fact Check: Irina Tsukerman’s Article on Pegasusgate,” Untidy (blog), July 5, 2023, https://www.untidy.news/p/irina-tsukermans-article-on-pegasusgate (archive: perma.cc/A8NZ-9DRU).

  43. Jonathan Scott, “Expelled: The Cost of Speaking Truth,” Medium, March 10, 2023, https://jonathandata1.medium.com/expelled-the-cost-of-speaking-truth-d458a1ad (archive: perma.cc/4FQT-VZRL) 2611 (account discontinued).

  44. Sandvik, “Fact Check: Irina Tsukerman’s Article.”

  45. Łukasz, “Jonathan Scott Is Becoming the Alex Jones of Cybersecurity,” Medium, October 11, 2022, https://medium.com/@maldr0id/jonathan-scott-is-becomingthe-alex-jones-of-cybersecurity-4f6f79857905 (archive: perma.cc/L4J4-JX67).

  46. Catalan Fake, “Irina Tsukerman.mp4,” August 16, 2022, video, 34:08, https://vimeocom/740170493.

  47. Karine Pfenniger, “From Trump Supporters to a Human Rights Attorney: The Digital Influencers Who Harassed a Journalist,” Forbidden Stories, February 16, 2023, https://forbiddenstories.org/story-killers-digital-influencers/ (archive: perma.cc/QL4F-LBBP).

  48. “Hotel Rwanda Hero Paul Rusesabagina Freed.”

  49. Intelligence Authorization Act for Fiscal Year 2023, H.R. 8367, 117th Congress (2022), https://www.congress.gov/bill/117th-congress/house-bill/8367/text.

CHAPTER 19: FIGHT THE FUTURE

  1. Jim Heintz and Dasha Litvinova, “Russia Outlaws Top Independent News Site in Latest Crackdown,” Associated Press, January 26, 2023, https://apnews.com/article/politics-russia-government-moscow-business-law-enforcement132f628bb3eeb1d038cfd3fe835f4af2.

  2. “Pegasus Infection of Galina Timchenko, Exiled Russian Journalist and Publisher,”Citizen Lab, University of Toronto, September 13, 2023, https://citizenlab.ca/202309/pegasus-infection-of-galina-timchenko-exiled-russian-journalist-and-publisher/ (archive: perma.cc/YG2C-MPJH).

  3. Andrei Soldatov, “Why Is Russia Not Using Pegasus Spyware?,” Moscow Times, July 21, 2021, https://www.themoscowtimes.com/2021/07/21/why-is-russia-not-usingpegasus-spyware-a74572 (archive: perma.cc/MBJ4-ZJVQ).

  4. Natalia Krapiva and Rand Hammoud, “Hacking Meduza: Pegasus Spyware Used to Target Putin’s Critic,” Access Now, September 13, 2023, https://www.accessnow.orgpublication/hacking-meduza-pegasus-spyware-used-to-target-putins-critic/.

  5. Andrew Roth, “Russian TV station in Latvia loses license over Ukraine war coverage,” Guardian, December 6, 2022, https://www.theguardian.com/world/2022dec/06/rain-russian-tv-station-in-latvia-loses-licence-over-ukraine-war-coverage.

  6. Nicolas Camut, “We Should Monitor All Russians Living in the West, Czech Leader Says,” Politico, June 15, 2023, https://www.politico.eu/article/petr-pavel-russia-czech-republic-surveillance/ (archive: perma.cc/KT5N-UVK7).

  7. Krapiva and Hammoud, “Hacking Meduza.”

  8. “‘May Your Nits Not Sleep in Peace!’ Unidentified People Threatening iStories’ Journalists for More than Half a Year,” iStories, September 19, 2023, https://istoriesmedia/en/stories/2023/09/19/istories-journalists-threatening/.

  9. “What Happened in Israel? A Breakdown of How Hamas Attack Unfolded,” Al Jazeera, October 7, 2023, https://www.aljazeera.com/news/2023/10/7/what-hap pened-in-israel-a-breakdown-of-how-the-hamas-attack-unfolded; Daniel Byman, Riley McCabe, Alexander Palmer, Catrina Doxsee, Mackenzie Holtz, and Delaney Duff, “Hamas’s October 7 Attack: Visualizing the Data,” Center for Strategic and International Studies, December 19, 2023, https://www.csis.org/analysis/hamass-october-7-attack-visualizing-data (archive: perma.cc/9HLG-D4UL).

  10. Byman et al., “Hamas’s October 7 Attack.”

  11. “Israel Revises Down Toll from October 7 Attack to ‘Around 1,200,’” Al Jazeera, November 10, 2023, https://www.aljazeera.com/news/2023/11/10/israel-revisesdeath-toll-from-october-7-hamas-attack-to-1200-people; Lauren Fryer, “Israel Revises Down Its Death Toll from the Oct. 7 Hamas Attacks to About 1,200,” NPR, November 11, 2023, https://www.npr.org/2023/11/11/1212458974/israel-revisesdeath-toll-hamas-attacks-oct-7 (archive: perma.cc/JG3Y-D3H4).

  12. Cassandra Vinograd and Isabel Kershner, “Israel’s Attackers Took about 240 Hostages. Here’s What to Know about Them,” New York Times, November 20, 2023, https://www.nytimes.com/article/israel-hostages-hamas-explained.html.

  13. Sheera Frenkel and Steven Lee Myers, “Hamas Seeds Violent Videos on Sites with Little Moderation,” New York Times, October 10, 2023, https://www.nytimes.com/2023/10/10/technology/hamas-violent-videos-online.html.

  14. Justin Salhani, “Did Israel’s Overreliance on Tech Cause October 7 Intelligence Failure?,” Al Jazeera, December 9, 2023, https://www.aljazeera.com/features/2023/12/9/did-israels-overreliance-on-tech-cause-october-7-intelligence-failure (archive: perma.cc/B3DU-B3SM).

  15. Haleigh Bartos and John Chin, “What Went Wrong? Three Hypotheses on Israel’s Massive Intelligence Failure,” Modern War Institute, October 31, 2023, https://mwi.westpoint.edu/what-went-wrong-three-hypotheses-on-israels-massiveintelligence-failure/.16 (archive: perma.cc/2DTT-8CRX). Peter Beaumont, “Israeli Intelligence Leak Details Extent of Warnings over Hamas Attack,” Guardian, November 28, 2023, https://www.theguardian.com/world/2023nov/28/israeli-military-had-warning-of-hamas-training-for-attack-reports-say.

  16. Bartos and Chin, “What Went Wrong?”

  17. Ronen Bergman, Mark Mazzetti, and Maria Abi-Habib, “How Years of Israeli Failures on Hamas Led to a Devastating Attack,” New York Times, October 29, 2023, https://www.nytimes.com/2023/10/29/world/middleeast/israel-intelligence-hamasattack.html; Mehul Srivastava, “Israeli Intelligence ‘Dismissed’ Detailed Warning of Hamas Raid,” Financial Times, November 23, 2023, https://www.ft.com/content/277573ae-fbbc-4396-8faf-64b73ab8ed0a (archive: perma.cc/AJQ3-EHRD).

  18. Brian Osgood and Adam Muro, “Israel War on Gaza Updates: Gaza Becoming ‘Uninhabitable’—UN Official,” Al Jazeera, January 5, 2024, https://www.aljazeera.com/news/liveblog/2024/1/5/israel-war-on-gaza-live-israel-attacks-bombard-khanyounis-rafah; “Maps: Tracking the Attacks in Israel and Gaza,” New York Times, https://www.nytimes.com/interactive/2023/10/07/world/middleeast/israel-gaza-maps.html (archive: perma.cc/FV2D-2JW4).

  19. “Israel-Gaza War in Maps and Charts: Live Tracker,” Al Jazeera, https://www.aljazeera.com/news/longform/2023/10/9/israel-hamas-war-in-maps-and-charts-live-tracker.

  20. “Journalist Casualties in the Israel-Gaza War,” Committee to Protect Journalists, August 2, 2024, https://cpj.org/2024/08/journalist-casualties-in-the-israel-gaza-con flict/.

  21. “Israel Bombs al-Maghazi Refugee Camp, Killing Dozens, Gaza Officials Say,” Al Jazeera, November 5, 2023, https://www.aljazeera.com/news/2023/11/5/israelbombs-al-maghazi-refugee-camp-killing-dozens-gaza-officials-say; “How Israel Has Destroyed Gaza’s Schools and Universities,” Al Jazeera, January 24, 2024, https://www.aljazeera.com/news/2024/1/24/how-israel-has-destroyed-gazasschools-and-universities; Alessandra Bajec, “Israel’s War on Hospitals in Gaza,”ew Arab, https://www.newarab.com/analysis/israels-war-hospitals-gaza (archive: perma.cc/3MMH-U2HZ).

  22. “Netanyahu Deletes ‘Racist’ Tweet on Palestinian ‘Children of Darkness’ after Hospital Massacre,” New Arab, October 18, 2023, https://www.newarab.com/news/netanyahu-deletes-palestinian-children-darkness-tweet (archive: perma.cc/25AN-YFPW); Megan K. Stack, “I’ve Been under Bombardment. There Must Be a Cease-Fire in Gaza,” New York Times, October 30, 2023, https://www.nytimes.com/2023/10/30/opinion/ceasefire-israelgaza-bombardment.html.

  23. Raffi Berg, “What Is South Africa’s Genocide Case against Israel at the ICJ?,” BBC, May 24, 2024, https://www.bbc.com/news/world-middle-east-67922346 (archive: perma.cc/L5J6-HQ8U); “Has Israel Complied with ICJ Order in Gaza Genocide Case?,” Al Jazeera, February 26, 2024, https://www.aljazeera.com/news/2024/2/26/has-israel-complied-with-icjorder-in-gaza-genocide-case.

  24. Office of the Prosecutor, “Statement of ICC Prosecutor Karim A.A. Khan KC: Applications for Arrest Warrants in the Situation in the State of Palestine,” Inter- national Criminal Court, May 20, 2024, https://www.icc-cpi.int/news/statement-iccprosecutor-karim-aa-khan-kc-applications-arrest-warrants-situation-state.

  25. Harry Davies, “Revealed: Israeli Spy Chief ‘Threatened’ ICC Prosecutor over WarCrimes Inquiry,” Guardian, May 28, 2024, https://www.theguardian.com/world/article/2024/may/28/israeli-spy-chief-icc-prosecutor-war-crimes-inquiry (archive: perma.cc/8L4P-RV29).

  26. “About Apple Threat Notifications and Protecting against Mercenary Spyware,” Apple Support, April 10, 2024, https://support.apple.com/en-us/102174 (archive: perma.cc/R7U5-JMT2).

  27. “Digital Security Helpline,” Access Now, accessed June 1, 2024, https://www.accessnow.org/help/ (archive: perma.cc/N2US-2DTE).

  28. John Scott-Railton, Bill Marczak, Paolo Nigro Herrero, Bahr Abdul Razzak, Noura al-Jizawi, Salvatore Solimano, and Ron Deibert, Project Torogoz: Extensive Hacking of Media & Civil Society in El Salvador with Pegasus Spyware, Research Report No. 148, Citizen Lab, University of Toronto, January 12, 2022, https://citizenlab.ca/2022/01/project-torogoz-extensive-hacking-media-civil-society-el-salvador-pegasus-spyware/ (archive: perma.cc/TDY7-CNKK); John Scott-Railton, Bill Marczak, Irene Poetranto, Bahr Abdul Razzak, Sutawan Chanprasert, and Ron Deibert, GeckoSpy: Pegasus Spyware Used against Thai- land’s Pro-Democracy Movement, Research Report No. 157, Citizen Lab, University of Toronto, July 17, 2022, https://citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-against-thailands-pro-democracy-movement/ (archive: perma.cc/Q8XX-P56P).

  29. “About Lockdown Mode,” Apple Support, January 10, 2024, https://support.applecom/en-us/105120.

  30. “Apple Expands Industry-Leading Commitment to Protect Users from Highly Targeted Mercenary Spyware,” Apple Newsroom, updated July 6, 2022, https://www.apple.com/newsroom/2022/07/apple-expands-commitment-to-protect-users-from-mercenary-spyware/ (archive: perma.cc/J6KA-X2QQ).

  31. “About the Dignity and Justice Fund,” Ford Foundation, accessed June 1, 2024, https://www.fordfoundation.org/work/our-grants/about-the-dignity-and-justice-fund/ (archive: perma.cc/TPA3-6MNV).

  32. “Apple Expands Industry-Leading Commitment.”

  33. David E. Sanger, Nicole Perlroth, Ana Swanson, and Ronen Bergman, “U.S. Black- lists Israeli Firm NSO Group over Spyware,” New York Times, November 3, 2021, https://www.nytimes.com/2021/11/03/business/nso-group-spyware-blacklist.html.

  34. Bill Marczak, John Scott-Railton, Astrid Perry, Noura al-Jizawi, Siena Anstis, Zoe Panday, Emma Lyon, Bahr Abdul Razzak, and Ron Deibert, Sweet QuaDreams: A First Look at Spyware Vendor QuaDream’s Exploits, Victims, and Customers, Research Report No. 164, Citizen Lab, University of Toronto, April 11, 2023, https://citizenlab.ca2023/04/spyware-vendor-quadream-exploits-victims-customers/.

  35. Omer Kabir and Meir Orbach, “Offensive Cyber Company QuaDream Shutting Down amidst Spyware Accusations,” CTech, April 16, 2023, https://www.calcalistechcom/ctechnews/article/hy78kiym2.

  36. US Department of State, “The United States Adds Foreign Companies to Entity List for Malicious Cyber Activities,” press release, July 18, 2023, https://www.state.gov/the-united-states-adds-foreign-companies-to-entity-list-for-malicious-cyberactivities-2/.

  37. US Department of the Treasury, “Treasury Sanctions Members of the Intellexa Commercial Spyware Consortium,” press release, March 5, 2024, https://hometreasury.gov/news/press-releases/jy2155.

  38. White House, “Fact Sheet: President Biden Signs Executive Order to Prohibit U.S. Government Use of Commercial Spyware That Poses Risks to National Security,” March 27, 2023, https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/27/fact-sheet-president-biden-signs-executive-order-to-prohibit-u-s-government-use-of-commercial-spyware-that-poses-risks-to-national-security/ (archive: perma.cc/RY66-VR9Q).

  39. Alex Boutilier, “Canada to Back Biden Administration’s Limits on ‘Mercenary’ Spyware Tools,” Global News, March 30, 2023, https://globalnews.ca/news/9589163/canada-biden-spyware-limits/ (archive: perma.cc/AR5X-RRQM).

  40. White House, “Joint Statement on Efforts to Counter the Proliferation and Misuse of Commercial Spyware,” March 18, 2024, https://www.whitehouse.gov/briefing-room/statements-releases/2024/03/18/joint-statement-on-efforts-to-counter-the-proliferation-and-misuse-of-commercial-spyware/ (archive: perma.cc/399T-CSWQ).

  41. Communications Security Establishment Canada, “Canada Joins International Security Partners in Release of Advisory, Guidance on Growing Cyber Security Threat to Civil Society,” Government of Canada, May 14, 2024, https://www.canada.ca/en/communications-security/news/2024/05/canada-joins-international-security-partners-in-release-of-advisory-guidance-on-growing-cyber-security-threat-to-civil-society.html (archive: perma.cc/3VB5-KLAD).

  42. Shaun Walker, “Poland Launches Inquiry into Previous Government’s Spyware Use,” Guardian, April 1, 2024, https://www.theguardian.com/world/2024/apr/01/poland-launches-inquiry-into-previous-governments-spyware-use (archive: perma.cc/G2GC-UUP9); “Spain Closes Pegasus Investigation over ‘Lack of Cooperation’ from Israel,” Guardian, July 10, 2023, https://www.theguardian.com/world/2023/jul/10/spain-closes-pegasus-investigation-over-lack-of-cooperation-from-israel (archive: perma.cc/D22K-MT4R).

  43. Andrew Higgins, “Donald Tusk Chosen as Poland’s Prime Minister after Rival Is Rejected,” New York Times, December 11, 2023, https://www.nytimes.com/2023/1211/world/europe/poland-donald-tusk-government.html; “Spain’s Socialists Reach Gov’t Coalition Deal with Hard-Left Sumar Party,” Al Jazeera, October 24, 2023, https://www.aljazeera.com/news/2023/10/24/spains-socialists-reach-govt-coalition-deal-with-hard-left-sumar-party (archive: perma.cc/C2X5-C8XN).

  44. Davide Scigliuzzo, “Blacklisted Pegasus Spyware Firm Shunned by Wall Street, Too,” Bloomberg, November 12, 2021, https://www.bloomberg.com/news/articles2021-11-12/spyware-firm-nso-group-drops-deeper-into-distress-after-ceo-exit (archive: perma.cc/LLW5-VRR3).

  45. Eliza Ronalds-Hannon and Davide Scigliuzzo, “Israel’s Pegasus Spyware Maker Takes Drastic Measures to Survive Global Scandal,” Bloomberg, November 4, 2022, https://www.bloomberg.com/news/articles/2022-11-04/israel-s-nso-takes-drasticmeasures-to-survive-spyware-scandal (archive: perma.cc/V38W-D9J9).

  46. Kaye Wiggins, “NSO Group Deemed ‘Valueless’ to Private Equity Backers,” Finan- cial Times, April 11, 2022, https://www.ft.com/content/24584247-0fd4-4826-bcac-f726ad17af58 (archive: perma.cc/ZB5G-CR39).

  47. “Defense Ministry Said to Freeze Export Licenses for Israeli ‘Cyberattack’ Tech,”imes of Israel, February 5, 2022, https://www.timesofisrael.com/defense-ministrysaid-to-freeze-export-licenses-for-israeli-cyberattack-tech/.

  48. Patrick Kingsley and Isabel Kershner, “Israel Protests: Israeli Lawmakers Debate Judicial Overhaul Late into Night,” New York Times, July 23, 2023, https://www.nytimes.com/live/2023/07/23/world/israel-protests.50 (archive: perma.cc/H4NB-DJHA). Yonette Joseph and Patrick Kingsley, “Netanyahu Will Return with Corruption Charges Unresolved. Here’s Where the Case Stands,” New York Times, November 3, 2022, https://www.nytimes.com/2022/11/03/world/middleeast/netanyahu-corruptioncharges-israel.html.

  49. Isabel Kershner and Patrick Kingsley, “What’s Next for Israel’s Judicial Overhaul?,”ew York Times, September 13, 2023, https://www.nytimes.com/article/israeljudicial-overhaul-vote.html.

  50. Anna Gordon, “What Israelis Think of the War with Hamas,” Time, November 10, 2023, https://time.com/6333781/israel-hamas-poll-palestine/ (archive: perma.cc/865K-A9LZ); Tamar Hermann and Or Anabi, “Even on the Right, Israelis Want Elections Immediately After the War,” Israel Democracy Institute, December 19, 2023, https://en.idi.org.il/articles/51872 (archive: perma.cc/552F-XE4J).

  51. Emma Goldberg, “Some Israeli Journalists Express Fear about Conveying Dissenting Views,” New York Times, October 21, 2023, https://www.nytimes.com/2023/10/21business/media/israel-journalists-hamas-war.html.

  52. “Israeli Ministers Join Gathering Calling for Resettlement of Gaza,” Al Jazeera, January 29, 2024, https://www.aljazeera.com/news/2024/1/29/israeli-ministers-join-gathering-calling-for-rebuilding-settlements-in-gaza (archive: perma.cc/GAE8-N26V).

  53. Yuliya Chernova, “Ex-CEO of NSO Group Raises $33.6 Million for Israeli Cyber Startup,” Wall Street Journal, November 21, 2023, https://www.wsj.com/articles/exceo-of-nso-group-raises-33-6-million-for-israeli-cyber-startup-ae8e7399.

  54. Chernova, “Ex-CEO of NSO Group.”

  55. Chernova, “Ex-CEO of NSO Group.”

  56. Vas Panagiotopoulos, “Notorious Spyware Maker NSO Group Is Quietly Plotting a Comeback,” Wired, January 24, 2024, https://www.wired.com/story/nso-group-lobbying-israel-hamas-war/ (archive: perma.cc/YCB6-E9NE).

  57. Between a Hack and a Hard Place: How Pegasus Spyware Crushes Civic Space in Jordan, Access Now, February 1, 2024, https://www.accessnow.org/publication/between-a-hack-and-a-hard-place-how-pegasus-spyware-crushes-civic-space-in-jordan/ (archive: perma.cc/UU3U-QHQV).

  58. Knight First Amendment Institute, “El Faro Journalists, Knight Institute Urge Court to Deny Motion to Dismiss Case against Spyware Manufacturer,” press release, May 19, 2023, http://knightcolumbia.org/content/el-faro-journalists-knight-institute-urge-court-to-deny-motion-to-dismiss-case-against-spyware-manufacturer (archive: perma.cc/6DZJ-GVCE); Suzanne Smalley, “Federal Judge Rejects NSO’s Effort to Dismiss Apple’s Pegasus Lawsuit,” Record, January 24, 2024, https://therecord.media/judge-rejects-nso-effort-to-dismiss-apple-lawsuit (archive: perma.cc/Q43S-DVN2); Joseph Menn, “Apple Seeks to Drop its Lawsuit Against Israeli Spyware Pioneer NSO,” Washington Post, September 13, 2024, https://www.washingtonpost.com/technology/2024/09/13/apple-lawsuit-nsopegasus-spyware/; Harry Davies and Stephanie Kirchgaessner, “Israel Tried to Frus- trate US Lawsuit Over Pegasus Spyware, Leak Suggests,” Guardian, July 25, 2024, https://www.theguardian.com/news/article/2024/jul/25/israel-tried-to-frustrateus-lawsuit-over-pegasus-spyware-leak-suggests.

  59. WhatsApp Inc. v. NSO Group Technologies Limited, 4:19-cv-07123 (ND Cal. Jan. 18, 2024), ECF No. 265, https://www.courtlistener.com/docket/16395340/265/5/whatsapp-inc-v-nso-group-technologies-limited/ (archive: perma.cc/2X6E-Y2TH).

  60. WhatsApp Inc. v. NSO Group Technologies Limited, 4:19-cv-07123 (ND Cal. Jan. 18, 2024), Foreign Non-Party the Citizen Lab’s Proposed Opposition to Defen-dants’ Motion for Issuance of Letter Rogatory, March 28, 2024, https://storage.courtlistener.com/recap/gov.uscourts.cand.350613/gov.uscourts.cand.350613.294.2.pdf (archive: perma.cc/DFC6-H9NV).

  61. Maggie Haberman and Jonathan Swan, “Trump Had Good Fortune So Far with His Four Cases. Then Came a Verdict,” New York Times, May 30, 2024, https://www.nytimes.com/2024/05/30/us/politics/trump-verdict-analysis.html (archive: perma.cc/9J8N-3EZ4); Lazaro Gamio, Karen Yourish, Matthew Haag, Jonah E. Bromwich, Maggie Haberman, and K. K. Rebecca Lai, “The Trump Manhattan Criminal Verdict, Count by Count,” New York Times, May 30, 2024, https://www.nytimes.com/interactive/2024/05/30/nyregiontrump-hush-money-verdict.html.

  62. Antoaneta Roussi, “How Europe Became the Wild West of Spyware,” Politico, October 25, 2023, https://www.politico.eu/article/how-europe-became-wild-west-spyware/ (archive: perma.cc/7WZJ-9M2A).

  63. Lorenzo Franceschi-Bicchierai, “Spyware Startup Variston Is Losing Staff—Some Say It’s Closing,” TechCrunch, February 15, 2024, https://techcrunch.com/2024/02/15/variston-spyware-losing-staff-some-say-closing/ (archive: perma.cc/3WP7-M37H).

  64. Bryan Fogel, dir., The Dissident, 2020; San Francisco, CA: Vertical Entertainment; Kanopy, 2021. Online video.