CHAPTER 4: BREAKFAST IN UZBEKISTAN

  1. Amir Rapaport, “The Cyber Technology Market Is Endless,” Israel Defense, December 15, 2015, https://www.israeldefense.co.il/en/node/24622.

  2. “Elbit Systems Buys Nice’s Cyber Unit for up to $158 Mln,” Reuters, May 21, 2015, www.reuters.com/article/idUSL5N0YC0XF/.

  3. Elbit Systems, “Elbit Systems to Reorganize the Business of CYBERBIT,” press release, September 18, 2017, elbitsystems.com/pr-new/elbit-systems-reorganize-business-cyberbit/ (archive: perma.cc/9UKV-LH2G).

  4. “World Report 2015: Uzbekistan—Events of 2014,” Human Rights Watch, 2015, www.hrw.org/world-report/2015/country-chapters/uzbekistan (archive: perma.cc/9FJ3-NHV8).

  5. “Ethiopia,” Minority Rights Group, June 2019, www.minorityrights.org/countryethiopia/ ; Laetitia Bader, “Ethiopia’s Other Conflict,” Human Rights Watch, July 4, 2022, www.hrw.org/news/2022/07/04/ethiopias-other-conflict (archive: perma.cc/L2LB-JXML).

  6. “Ethiopia,” Reporters without Borders, rsf.org/en/country/Ethiopia (archive: perma.cc/YYB9-H3QY); Felix Horne and Cynthia M. Wong, “They Know Everything We Do,” Human Rights Watch, March 25, 2014, www.hrw.org/report/2014/03/25/they-know-everything-we-dotelecom-and-internet-surveillance-ethiopia.

  7. Morgan Marquis-Boire, Bill Marczak, Claudio Guarnieri, and John Scott-Railton, You Only Click Twice: FinFisher’s Global Proliferation, Research Report No. 15, Citizen Lab, University of Toronto, March 13, 2013, www.citizenlab.ca/2013/03/you-only-click-twice-finfishers-global-proliferation-2/ (archive: perma.cc/B5S7-GKH3 ); Bill Marczak, John Scott-Railton, and Sarah McKune, Hacking Team Reloaded? US-Based Ethiopian Journalists Again Targeted with Spyware, Research Report No. 50, Citizen Lab, University of Toronto, March 9, 2015, citizenlab.ca/2015/03/hacking-team-reloaded-us-based-ethiopian-journalists-targeted-spyware/ (archive: perma.cc/72WV-PW48).

  8. Bill Marczak, Geoffrey Alexander, Sarah McKune, John Scott-Railton, and Ron Deibert, Champing at the Cyberbit: Ethiopian Dissidents Targeted with New Commercial Spyware, Research Report No. 102, Citizen Lab, University of Toronto, December 6, 2017, citizenlab.ca/2017/12/champing-cyberbit-ethiopian-dissidents-targeted-commercial-spyware/ (archive: perma.cc/D3G6-NFHQ).

  9. Elbit Systems Ltd., US Securities and Exchange Commission, December 31, 2011, www.sec.gov/Archives/edgar/data/1027664/000117891312000998/R10.htm.

  10. “C4 Security Ltd.,” Israel Export Institute, 2023, https://pitchbook.com/profilescompany/268044-58#overview.

  11. “Hacking Team,” WikiLeaks, July 8, 2015, wikileaks.org/hackingteam/emails/ (archive: perma.cc/VE8F-FJE4).

  12. “Cyberbit Caught Up in Zambian Financial Crisis,” Intelligence Online, October 24, 2018, www.intelligenceonline.com/corporate-intelligence/2018/10/24/cyberbitcaught-up-in-zambian-financial-crisis,108329307-art.

  13. Office of Public Affairs, “Israel’s Largest Bank, Bank Hapoalim, Admits to Conspiring with U.S. Taxpayers to Hide Assets and Income in Offshore Accounts,” press release, US Department of Justice, April 30, 2020, www.justice.gov/opa/pr/israel-s-largest-bank-bank-hapoalim-admits-conspiring-us-taxpayers-hide-assets-and-income (archive: perma.cc/37Z4-HR5T).

  14. Agence France-Presse, “Israel’s Bank Hapoalim Pays $900 Mn over Tax Evasion,FIFA Cases,” Barron’s, April 30, 2020, www.barrons.com/news/israel-s-bank-hapoalim-pays-900-mn-over-tax-evasion-fifa-cases-01588285508 (archive: perma.cc/5HM6-B744).

  15. Peter Bouckaert, “‘License to Kill’: Philippine Police Killings in Duterte’s ‘War on Drugs,’” Human Rights Watch, March 2, 2017, www.hrw.org/report/2017/03/02/license-kill/philippine-police-killings-dutertes-war-drugs (archive: perma.cc/CRE6-ADUC).

  16. “Thailand: Events of 2022,” Human Rights Watch, 2023, www.hrw.org/world-report/2023/country-chapters/thailand (archive: perma.cc/A7YA-PPGA).

  17. “Vietnam Jails Dissident for Eight Years over Facebook Posts,” Reuters, November 18, 2022, www.reuters.com/world/asia-pacific/vietnam-jails-dissident-eight-yearsover-facebook-posts-2022-11-18/.

  18. Cheryl Reed, “Citizen Journalist’s Arrest Decried by Media Rights Advocates,” Eurasianet, July 5, 2022, eurasianet.org/kazakhstan-citizen-journalists-arrest-decriedby-media-rights-advocates.

  19. Victoire Ingabire Umuhoza, “Rwanda Has to Investigate Killings of Opposition Members,” Al Jazeera, March 24, 2023, www.aljazeera.com/opinions/2023/3/24rwanda-has-to-investigate-killings-of-opposition-members; “Rwanda Classified,” Forbidden Stories, accessed May 29, 2024, https://forbiddenstories.org/projectsposts/rwanda-classified/ (archive: perma.cc/V4MH-5YZX).

  20. Fatima Hussein, “US Is Sanctioning the Pro-Russian Head of Serbian Intelligence for Alleged Corruption,” Associated Press, July 11, 2023, www.apnews.com/article/serbia-sanctions-treasury-vulin-russia-6b8e01b5595fc114094c4a3a3cf9eab5 (archive: perma.cc/W42B-AGN6).

  21. “Nigeria: Events of 2022,” Human Rights Watch, 2023, www.hrw.org/world-report/2023/country-chapters/nigeria (archive: perma.cc/6LQV-7V38).

  22. John Snow, “Shodan and Censys: The Ominous Guides through the Internet of Things,” Kaspersky Daily (blog), February 29, 2016, www.kaspersky.com/blog/shodan-censys/11430/ (archive: perma.cc/M7EU-AJMB).

  23. Morgan Marquis-Boire and Bill Marczak, From Bahrain with Love: FinFisher’s Spy Kit Exposed?, Research Report No. 9, Citizen Lab, University of Toronto, July 25, 2012, citizenlab.ca/2012/07/from-bahrain-with-love-finfishers-spy-kit-exposed/ (archive: perma.cc/N9L8-BDL5).

  24. Bill Marczak, Claudio Guarnieri, Morgan Marquis-Boire, and John Scott-Railton, Mapping Hacking Team’s “Untraceable” Spyware, Research Report No. 33, Citizen Lab, University of Toronto, February 17, 2014, www.citizenlab.ca/2014/02/mappinghacking-teams-untraceable-spyware/; Bill Marczak, Claudio Guarnieri, Morgan Marquis-Boire, and John Scott-Railton, Hacking Team and the Targeting of Ethiopian Journalists, Research Report No. 32, Citizen Lab, University of Toronto, February 12, 2014, www.citizenlab.ca/2014/02/hacking-team-targeting-ethiopian-journalists/ (archive: perma.cc/M9PE-CCNM ); Bill Marczak, Claudio Guarnieri, Morgan Marquis-Boire, John Scott-Railton, and Sarah McKune, Hacking Team’s US Nexus, Research Report No. 35, Citizen Lab, University of Toronto, February 28, 2014, www.citizenlab.ca/2014/02/hacking-teams-us-nexus/ (archive: perma.cc/S37K-QTCB).

  25. Irene Poetranto, “Open Letter to Hacking Team,” Citizen Lab, University of Toronto, August 2014, citizenlab.ca/2014/08/open-letter-hacking-team/ (archive: perma.cc/8BPD-829M).

  26. “Hacking Team,” WikiLeaks, July 8, 2015, wikileaks.org/hackingteam/emails/ (archive: perma.cc/VE8F-FJE4 ); “Eight Things We Know So Far from the Hacking Team Hack,” Privacy International, July 9, 2015, http://privacyinternational.org/news-analysis/1395/eightthings-we-know-so-far-hacking-team-hack.

  27. Morgan Marquis-Boire and Cora Currier, “A Detailed Look at Hacking Team’s Emails about Its Repressive Clients,” Intercept, July 7, 2015, www.theintercept.com2015/07/07/leaked-documents-confirm-hacking-team-sells-spyware-repressivecountries/.

  28. David Vincenzetti, “URGENT: Yet Another Citizen Labs’ Attack,” email, June 24, 2014, www.wikileaks.org/hackingteam/emails/emailid/179377 (archive: perma.cc/YJ2T-RK8J), in “Hacking Team,” WikiLeaks, July 8, 2015.

  29. David Vincenzetti,“Re: URGENT: Yet Another Citizen Labs’ Attack,” email, June 30, 2014, www.wikileaks.org/hackingteam/emails/emailid/171363 (archive: perma.cc/2JJY-CXWU), in “Hacking Team,” WikiLeaks, July 8, 2015.

  30. Lorenzo Franceschi-Bicchierai, “Hacking Team Founder: ‘Hacking Team Is Dead,’”ice, May 26, 2020, www.vice.com/en/article/n7wbnd/hacking-team-is-dead (archive: perma.cc/D9QT-JSDA).

  31. Lorenzo Franceschi-Bicchierai, “Founder of Spyware Maker Hacking Team Arrested for Attempted Murder: Local Media,” TechCrunch, November 29, 2023, techcrunch.com/2023/11/29/founder-of-spyware-maker-hacking-team-arrested-for-attempted-murder-local-media/ (archive: perma.cc/QS2T-J5CF ). Charges against Vincenzetti are still pending at the time of writing.

  32. Vice TV, “An Interview with Hacker ‘Phineas Fisher’ as a Puppet | CYBERWAR,” July 20, 2016, video, 5:45, www.youtube.com/watch?v=BpyCl1Qm6Xs (archive: perma.cc/MZS3-XQKY).

  33. Jakub Dalek, Lex Gill, Bill Marczak, Sarah McKune, Naser Noor, Joshua Oliver, Jon Penney, Adam Senft, and Ron Deibert, Planet Netsweeper, Research Report No. 108, Citizen Lab, University of Toronto, April 25, 2018, www.citizenlab.ca/2018/04/planet-netsweeper/ (archive: perma.cc/C9YJ-EE7H).

  34. Ronald Deibert, “Ottawa Needs to Act on Global Censorship of LGBTQ2+ Content,” Hill Times, August 2, 2018, www.hilltimes.com/story/2018/08/02/ottawaneeds-act-global-censorship-lgbtq2-content/262275/ (archive: perma.cc/WY5Q-CMQC).

  35. Jakub Dalek, Ron Deibert, Sarah McKune, Phillipa Gill, Adam Senft, and Naser Noor, Information Controls during Military Operations, Research Report No. 66, Citizen Lab, University of Toronto, October 21, 2015, www.citizenlab.ca/2015/10/information-controls-military-operations-yemen/; Ron Deibert, “On Research in the Public Interest,” Citizen Lab, University of Toronto, July 26, 2016, citizenlab.ca/2016/07/research-interest/.

  36. Protection of Public Participation Act, 2015, S.O. 2015, c. 23—Bill 52, www.ontario.ca/laws/statute/s15023.

  37. Morgan Marquis-Boire, Jakub Dalek, Sarah McKune, Matthew Carrieri, Masashi Crete-Nishihata, Ron Deibert, Saad Omar Khan, Helmi Noman, John Scott- Railton, and Greg Wiseman, Planet Blue Coat: Mapping Global Censorship and Surveil- lance Tools, Research Report No. 13, Citizen Lab, University of Toronto, January 15, 2013, citizenlab.ca/2013/01/planet-blue-coat-mapping-global-censorship-and-surveillance-tools/ (archive: perma.cc/CBE5-YB5L).

  38. Jakub Dalek and Adam Senft, Behind Blue Coat: Investigations of Commercial Filtering in Syria and Burma, Research Report No. 1, Citizen Lab, University of Toronto, November 9, 2011, citizenlab.ca/2011/11/behind-blue-coat/ (archive: perma.cc/DS8X-BZQJ).

  39. Bill Marczak, Jakub Dalek, Sarah McKune, Adam Senft, John Scott-Railton, and Ron Deibert, Bad Traffic: Sandvine’s PacketLogic Devices Used to Deploy GovernmentSpyware in Turkey and Redirect Egyptian Users to Affiliate Ads?, Research Report No. 107, Citizen Lab, University of Toronto, March 9, 2018, citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-deploy-government-spyware-turkey-syria/ (archive: perma.cc/9VJN-6KTB).

  40. Linda R. Rothstein, letter to Lyndon Cantor, CEO of Sandvine, March 8, 2018, citizenlab.ca/wp-content/uploads/2018/03/UofT-Sandvine-Letter-to-Lyndon-Cantor-signed-8-March-2018.pdf (archive: perma.cc/BR7S-8VMU).

  41. Bill Marczak, John Scott-Railton, Daniel Roethlisberger, Bahr Abdul Razzak, Siena Anstis, and Ron Deibert, “Predator in the Wires: Ahmed Eltantawy Targeted with Predator Spyware after Announcing Presidential Ambitions,” Citizen Lab, University of Toronto, September 22, 2023, citizenlab.ca/2023/09/predator-in-the-wires-ahmed-eltantawy-targeted-with-predator-spyware-after-announcing-presidential-ambitions/ (archive: perma.cc/YYM8-FKZY).

  42. “About the Security Content of iOS 17.0.1 and iPadOS 17.0.1,” Apple Support, November 15, 2023, support.apple.com/en-us/106369 (archive: perma.cc/X7FV-68BS).

  43. Office of the Spokesperson, “The United States Adds Sandvine to the Entity List for Enabling Human Rights Abuses,” press release, US Department of State, February 28, https://www.state.gov/the-united-states-adds-sandvine-to-the-entity-list-for-enabling-human-rights-abuses/ (archive: perma.cc/GA62-KANL).

  44. Bill Marczak, John Scott-Railton, Siddharth Prakash Rao, Siena Anstis, and Ron Deibert, Running in Circles: Uncovering the Clients of Cyberespionage Firm Circles, Research Report No. 133, Citizen Lab, University of Toronto, December 1, 2020, www.citizenlab.ca/2020/12/running-in-circles-uncovering-the-clients-of-cyberespionage-firm-circles /.

  45. Mark W. Zacher with Brent A. Sutton, Governing Global Networks: International Regimes for Transportation and Communications, Cambridge Studies in International Relations 44 (Cambridge: Cambridge University Press, 1995), https://doi.org/10.1017/CBO9780511521812 (archive: perma.cc/FXG6-5AQ7 ); Josie Middleton, “Propelling Women in Tech across Emerging Markets: Our Reflections on Female Entrepreneurship,” GSMA, June 18, 2019, https://www.gsma.com/mobilefordevelopmentblog/propelling-women-in-tech-across-emerging-markets-our-reflections-onfemale-entrepreneurship/; SAP, “Who Run the Telco World? Gender Disparity in the Telecommunications Sector,” http://www.sapevents.edgesuite.net/previewhubwomen-in-telco/pdfs/Women%20In%20Telco%20Slideshare.pdf.

  46. Nils Putnins, “Research on Signaling System 7 (SS7)—Risks, Attacks and Precautions,” SEQ Cybersecurity Blog, September 15, 2022, web.archive.org/web20220915101054/blog.seq.lv/research-on-signaling-system-7-ss7/.

  47. Robert Krulwich, “Playful Pranks from Apple’s Founder,” NPR, January 3, 2009, www.npr.org/templates/story/story.php?storyId=98977379 (archive: perma.cc/BEP6-5N5Y).

  48. Sergey Puzankov, “Back to the Future: Cross-Protocol Attacks in the Era of 5G,” Positive Technologies, accessed February 7, 2024, i.blackhat.com/asia-20/Friday/asia-20-Puzankov-Back-To-The-Future-Cross-Protocol-Attacks-In-The-Era-Of-5G.pdf (archive: perma.cc/A9WX-YEJU).

  49. Putnins, “Research on Signaling System 7 (SS7).”

  50. Al Araby, August 31, 2018, https://web.archive.org/web/20190409205521/ (archive: perma.cc/G8EJ-QQDL ) www.alaraby.co.uk/file/get/4749a75b-fc46-4917-85d3-7f8b41d4b34a ; Ogala Emman-uel, “How Governors Dickson, Okowa Spend Billions on High Tech Spying on Opponents, Others,” Premium Times (Nigeria), June 9, 2016, www.premiumtimesngcom/investigationspecial-reports/204987-investigation-governors-dickson-okowaspend-billions-high-tech-spying-opponents-others.html.

  51. “Thailand: Investigate Alleged Army Torture,” Human Rights Watch, November 22, 2016, https://www.hrw.org/news/2016/11/23/thailand-investigate-alleged-army-torture (archive: perma.cc/Y2WN-W8UP).

  52. John Scott-Railton, Bill Marczak, Claudio Guarnieri, and Masashi Crete-Nishihata, Bitter Sweet: Supporters of Mexico’s Soda Tax Targeted with NSO Exploit Links, Research Report No. 89, Citizen Lab, University of Toronto, February 11, 2017, www.citizenlab.ca/2017/02/bittersweet-nso-mexico-spyware/ (archive: perma.cc/G9J2-T6RF ); John Scott- Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware, Research Report No. 93, Citizen Lab, University of Toronto, June 19, 2017, www.citizenlab.ca/2017/06/reckless-exploit-mexico-nso/ (archive: perma.cc/LPC8-LMSS ); John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware, Research Report No. 94, Citizen Lab, University of Toronto, June 29, 2017, www.citizenlabca/2017/06/more-mexican-nso-targets/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless III: Investigation into Mexican Mass Disappearance Targeted with NSO Spyware, Research Report No. 96, Citizen Lab, University of Toronto, July 10, 2017, citizenlab.ca/2017/07/mexicodisappearances-nso/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless IV: Lawyers for Murdered Mexican Women’s Families Targeted with NSO Spyware, Research Report No. 98, Citizen Lab, University of Toronto, August 2, 2017, citizenlab.ca/2017/08/lawyers-murderedwomen-nso-group/ ; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless V: Director of Mexican Anti-Corruption Group Targeted with NSO Group’s Spyware, Research Report No. 99, Citizen Lab, University of Toronto, August 30, 2017, citizenlab.ca/2017/08/nso-spyware-mexicocorruption/; John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless VI: Mexican Journalists Investigating Cartels Targeted with NSO Spyware Following Assassination of Colleague, Research Report No. 116, Citizen Lab, University of Toronto, November 27, 2018, citizenlab.ca/2018/11/mexican-journalists-investigating-cartels-targeted-nso-spywarefollowing-assassination-colleague/; John Scott-Railton, Bill Marczak, Siena Anstis, Bahr Abdul Razzak, Masashi Crete-Nishihata, and Ron Deibert, Reckless VII: Wife of Journalist Slain in Cartel-Linked Killing Targeted with NSO Group’s Spyware, Research Report No. 117, Citizen Lab, University of Toronto, March 20, 2019, citizenlab.ca/2019/03/nso-spyware-slain-journalists-wife/.

  53. “UPR Submission—Nigeria 2018,” Front Line Defenders, April 7, 2018, www.frontlinedefenders.org/en/statement-report/upr-submission-nigeria-2018 (archive: perma.cc/7C7A-DKZ5).

  54. “Individuals Using the Internet (% of Population),” World Bank Group, accessed February 7, 2024, https://data.worldbank.org/indicator/IT.NET.USER.ZS?skip Redirection=true&view=map; Marczak, et al., Champing at the Cyberbit.

  55. Stephanie Kirchgaessner, “More Polish Opposition Figures Found to Have Been Targeted by Pegasus Spyware,” Guardian, February 17, 2022, https://www.heguardian.com/world/2022/feb/17/more-polish-opposition-figures-found-tohave-been-targeted-by-pegasus-spyware (archive: perma.cc/VX2N-7S43).

  56. Bill Marczak, John Scott-Railton, Sarah McKune, Bahr Abdul Razzak, and Ron Deibert, Hide and Seek: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries, Research Report No. 113, Citizen Lab, University of Toronto, September 18, 2018, www.citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/ (archive: perma.cc/TJ7M-8PMP ).