Економіка

Polish Senator Krzysztof Brejza’s mobile phone was hacked with sophisticated spyware nearly three dozen times in 2019 when he was running the opposition’s campaign against the right-wing populist government in parliamentary elections, an internet watchdog found.

Text messages stolen from Brejza’s phone — then doctored in a smear campaign — were aired by state-controlled TV in the heat of that race, which the ruling party narrowly won. With the hacking revelation, Brejza now questions whether the election was fair. 

It’s the third finding by the University of Toronto’s nonprofit Citizen Lab that a Polish opposition figure was hacked with Pegasus spyware from the Israeli hacking tools firm NSO Group. Brejza’s phone was digitally broken into 33 times from April 26, 2019, to October 23, 2019, said Citizen Lab researchers, who have been tracking government abuses of NSO malware for years. 

The other two hacks were identified earlier this week after a joint Citizen Lab-Associated Press investigation. All three victims blame Poland’s government, which has refused to confirm or deny whether it ordered the hacks or is a client of NSO Group. State security services spokesman Stanislaw Zaryn insisted Thursday that the government does not wiretap illegally and obtains court orders in “justified cases.” He said any suggestions the Polish government surveils for political ends were false. 

NSO, which was blacklisted by the U.S. government last month, says it sells its spyware only to legitimate government law enforcement and intelligence agencies vetted by Israel’s Defense Ministry for use against terrorists and criminals. It does not name its clients and would not say if Poland is among them.

Citizen Lab said it believes NSO keeps logs of intrusions so an investigation could determine who was behind the Polish hacks.

EU response 

In response to the revelations, European Union lawmakers said they would hasten efforts to investigate allegations that member nations such as Poland have abused Pegasus spyware.

The other two Polish victims are Ewa Wrzosek, an outspoken prosecutor fighting the increasingly hardline government’s undermining of judicial independence, and Roman Giertych, a lawyer who has represented senior leaders of Brejza’s party, Civic Platform, in sensitive cases. 

Prime Minister Mateusz Morawiecki on Wednesday dismissed revelations that Giertych and Wrzosek were hacked as “fake news.” Justice Minister Zbigniew Ziobro said he had no knowledge of “illegal actions aimed at the surveillance of citizens” but also said Poland was “not helpless” in taking action against people suspected of crimes. 

Giertych was hacked 18 times, also in the run-up to 2019 parliamentary elections that the ruling Law and Justice party won by a razor-thin margin. That victory has continued an erosion of democracy in the nation where the popular 1980s protest movement Solidarity presaged the eventual collapse of the Soviet empire. 

The intense tempo of the hacks of Brejza and Giertych “indicates an extreme level of monitoring” that raises pressing questions about abuses of power, Citizen Lab senior researcher John Scott-Railton said. Pegasus gives its operators complete access to a mobile device: They can extract passwords, photos, messages, contacts and browsing history, and activate the microphone and camera for real-time eavesdropping. 

“My heart sinks with each case we find,” Scott-Railton added. “This seems to be confirming our worst fear: Even when used in a democracy, this kind of spyware has an almost immutable abuse potential.”

Other confirmed victims have included Mexican and Saudi journalists, British attorneys, Palestinian human rights activists, heads of state and Uganda-based U.S. diplomats. 

An NSO spokesperson said Thursday that “the company does not and cannot know who the targets of its customers are, yet implements measures to ensure that these systems are used solely for the authorized uses.” The spokesperson said there is zero tolerance for governments that abuse the software; NSO says it has terminated multiple contracts of governments that have abused Pegasus, although it has not named any publicly. 

Despite any measures NSO might be taking, Citizen Lab notes, the list of abuse cases continues to grow. 

Doctored texts

Brejza, a 38-year-old attorney, told the AP that he has no doubt data stolen from his phone while he was chief of staff of the opposition coalition’s parliamentary campaign provided critical strategy insights. Combined with the smear effort against him, he said, it prevented “a fair electoral process.”

Text messages stolen from Brejza’s phone were doctored to make it appear as if he created an online group that spread hateful anti-government propaganda; reports in state-controlled media cited the altered texts. But the group didn’t exist. 

Brejza says he now understands where TVP state television got them. 

“This operation wrecked the work of staff and destabilized my campaign,” he said. “I don’t know how many votes it took from me and the entire coalition.” 

Brejza won his Senate seat in that October 2019 race. But since the ruling party held on to the more powerful lower house of parliament, it has steered Poland further away from EU standards of liberal democracy. 

Election monitors from the Organization for Security and Cooperation in Europe said at the time that control of state media gave the ruling party an unfair advantage but called the elections essentially free. They were unaware of the hacking. 

Brejza has been a Law and Justice party critic since it won power in 2015. For example, he has exposed large bonuses paid to senior government officials. In another case, he revealed that the postal service sent tens of thousands of dollars to a company tied to ruling party leader Jaroslaw Kaczynski. Brejza fears the hacking could have compromised whistleblowers who had reached out to him with evidence. 

NSO Group is facing daunting financial and legal challenges — including the threat of default on more than $300 million in debt — after governments used Pegasus spyware to spy on dissidents, journalists, diplomats and human rights activists from countries including Saudi Arabia, the United Arab Emirates, Mexico and the United States. The U.S. blacklisting of NSO has effectively barred U.S. companies from supplying technology to the Israeli firm.
…

U.S. chipmaker Intel is facing criticism in China after it apologized Thursday for a letter the firm sent to suppliers asking them “to ensure that its supply chain does not use any labor or source goods or services from the Xinjiang region.”

On Thursday, Intel posted a Chinese-language message on its WeChat and Weibo accounts apologizing for “trouble caused to our respected Chinese customers, partners and the public. Intel is committed to becoming a trusted technology partner and accelerating joint development with China.”

Intel’s apology came as U.S. President Joe Biden signed the Uyghur Forced Labor Prevention Act, which bans the import of goods produced by Uyghur slave labor. Under the measure, a company is prohibited from importing from China’s Xinjiang region unless it can prove that its supply chains have not used labor from Uyghurs, ethnic Muslims reportedly enslaved in Chinese camps.

Beijing denies complaints of abuses in the mostly Muslim region.

Intel is just the latest multinational firm to be caught up in the struggle over the Uyghurs issue as China prepares to host the Winter Olympics in February. Intel is among the International Olympic Committee sponsors. According to Reuters, 26% of Intel’s 2020 total revenue was earned in China.

Earlier this month, Intel’s letter to suppliers asking them to be sure not to use labor, products or services from Xinjiang cited restrictions imposed by “multiple governments.”

That sparked a backlash in China, with calls for a boycott and criticism of the company in state and social media. Global Times, a Chinese state-run newspaper, called Intel’s request to suppliers “arrogant and vicious,” according to reports.

Wang Junkai, also known as Karry Wang, a singer with the popular boy band TFBOYS, said on Weibo on Wednesday that he would not serve as an Intel brand ambassador. “National interests exceed everything,” he said, according to wire service reports.

Chinese officials acknowledged Intel’s apology.

China’s Foreign Ministry spokesperson said at a daily briefing in Beijing that “we note the statement and hope the relevant company will respect facts and tell right from wrong,” according to Reuters.

The White House also appeared to note the company’s apology.

Without naming Intel, Jen Psaki, the White House press secretary, said at a briefing Thursday that U.S. companies “should never feel the need to apologize for standing up for fundamental human rights or opposing repression,” according to reports.

Some information for this report came from The Associated Press and Reuters. 

 
…

Under pressure from U.S. auto safety regulators, Tesla has agreed to stop allowing video games to be played on center touch screens while its vehicles are moving. 

The National Highway Traffic Safety Administration says the company will send out a software update over the Internet so the function called “Passenger Play” will be locked and won’t work while vehicles are in motion. 

The move comes one day after the agency announced it would open a formal investigation into distracted driving concerns about Tesla’s video games, some of which could be played while cars are being driven. 

An agency spokeswoman says in a statement Thursday that the change came after regulators discussed concerns about the system with Tesla.

The statement says NHTSA regularly talks about infotainment screens with all automakers. A message was left Thursday seeking comment from Tesla, which has disbanded its media relations department. 

The agency says its investigation of Tesla’s feature will continue even with the update. 

“The Vehicle Safety Act prohibits manufacturers from selling vehicles with defects posing unreasonable risks to safety, including technologies that distract drivers from driving safely,” NHTSA’s statement said. The agency said it assesses how manufacturers identify and guard against distraction hazards through misuse or intended use of screens and other convenience technology. 

The agency announced Wednesday that it would formally investigate Tesla’s screens after an owner from the Portland, Oregon, area filed a complaint when he discovered that a driver could play games while the cars are moving. 

The agency said that the “Passenger Play” feature could distract the driver and increase the risk of a crash. 

The probe covers about 580,000 Tesla Models S, X, Y and 3 from the 2017 through 2022 model years. 
…

The U.S. Securities and Exchange Commission has declined an effort by Apple Inc. to skip a shareholder proposal asking the iPhone maker to provide greater transparency in its efforts to keep forced labor out of its supply chain. 

A group of shareholders earlier this year asked Apple’s board to prepare a report on how the company protects workers in its supply chain from forced labor. The request for information covered the extent to which Apple has identified suppliers and sub-suppliers that are a risk for forced labor, and how many suppliers Apple has taken action against. 

In a letter from the SEC reviewed by Reuters on Wednesday, regulators denied Apple’s move to block the proposal, saying that “it does not appear that the essential objectives of the proposal have been implemented” so far. 

The letter means that Apple will have to face a vote on the proposal at its annual shareholder meeting next year, barring a deal with the shareholders who made it. 

Apple did not immediately respond to a request for comment. 

American lawmakers last week passed a bill banning imports from China’s Xinjiang region over concerns about forced labor. 

“There’s rightfully growing concern at all levels of government about the concentration camplike conditions for Uyghurs and other Turkic Muslims living under Chinese government rule,” Vicky Wyatt, campaign director for SumOfUs, a group supporting the shareholder proposal, said in a statement on Wednesday. 

Apple routinely asks the SEC to skip shareholder proposals, and the requests are granted about half the time. 

The SEC also denied Apple’s request to skip a shareholder proposal that would give investors more information about the company’s use of nondisclosure agreements.
…