Skip to main content

Home/ authoritarianism in MENA/ Group items tagged hacking

Rss Feed Group items tagged

Ed Webb

bellingcat - Lord Of The Flies: An Open-Source Investigation Into Saud Al-Qahtani - bel... - 0 views

  • Before tuning in via Skype to oversee the murder and dismemberment of Saudi Arabian journalist Jamal Khashoggi, Saud al-Qahtani, a high-level adviser to the crown prince of Saudi Arabia, Mohammed bin Salman (MBS), was best known for running social media operations for the royal court and serving as MBS’s chief propagandist and enforcer. His portfolio also included hacking and monitoring critics of the Kingdom and MBS.
  • Al-Qahtani registered at least 22 domains since 2009, some of which have been used as command and control servers for malware
  • al-Qahtani’s posts on Hack Forums detail the hacking tools and services he purchased and used and the social media platforms and mobile apps he targeted. By June 2011, less than two years after joining the forum, he estimated that he had 90% of paid and free RATs on the market. Al-Qahtani also paid Hack Forum members to have social media accounts deleted and sought to manufacture engagement activity on major social media platforms, including YouTube and Facebook.
  • ...8 more annotations...
  • He also posted at least three times while drunk, by his own admission, and opined on topics unrelated to hacking such as the role of religion in politics and policy toward Iran.
  • MBS’s repression machine is alive and well thanks in no small part to the Trump administration’s refusal to hold the Saudi strongman and his regime to account. 
  • Since Khashoggi was murdered last October, the CIA has observed its “duty to warn” on three separate occasions, sharing intelligence to alert dissidents based in the U.S., Canada and Norway to threats originating from Saudi Arabia. 
  • multiple media outlets have cited sources saying that he is still in MBS’s good graces and continuing to work in a similar capacity as before he was officially ousted from the royal court.
  • The best open-source indication to date that al-Qahtani is continuing his hacking work comes from the Guardian, which reported in June 2019, that it was targeted by a Saudi hacking team at the order of al-Qahtani. The newspaper was initially warned of the order by a source in Riyadh earlier this year, and the threat was subsequently corroborated by a confidential internal order signed by al-Qahtani, which the Guardian reviewed. The document, dated March 7, 2019, was written in Arabic and instructed “heads of technological and technical departments” run from the cybersecurity directorate within the private office of the MBS to “carry out the penetration of the servers of the Guardian newspaper and those who worked on the report that was published, and deal with the issue with complete secrecy, then send us all the data as soon as possible.”
  • On June 19, 2019, Agnes Callamard, the United Nations (UN) Special Rapporteur on extrajudicial, summary or arbitrary killings, published a report on Khashoggi’s death, calling it a “premeditated extrajudicial execution” at the hands of the Saudi state. “His killing was the result of elaborate planning involving extensive coordination and significant human and financial resources. It was overseen, planned and endorsed by high-level officials. It was premeditated.”
  • The report specifically names al-Qahtani and MBS as two high-level officials who have not been criminally charged but for whom there is “credible evidence meriting further investigation.” 
  • In addition to the 22 domains analyzed above, this investigation identified several other domains that are likely linked to al-Qahtani but require further research and analysis
Ed Webb

Journalist's phone hacked by new 'invisible' technique: All he had to do was visit one ... - 0 views

  • The white iPhone with chipped paint that Moroccan journalist Omar Radi used to stay in contact with his sources also allowed his government to spy on him.They could read every email, text and website visited; listen to every phone call and watch every video conference; download calendar entries, monitor GPS coordinates, and even turn on the camera and microphone to see and hear where the phone was at any moment.
  • Forensic evidence gathered by Amnesty International on Radi’s phone shows that it was infected by “network injection,” a fully automated method where an attacker intercepts a cellular signal when it makes a request to visit a website. In milliseconds, the web browser is diverted to a malicious site and spyware code is downloaded that allows remote access to everything on the phone. The browser then redirects to the intended website and the user is none the wiser.
  • While Amnesty could not definitively state that the Moroccan authorities were behind the attack, the group was able to use forensic evidence to conclude this was very likely the case.
  • ...8 more annotations...
  • The spyware they found — commonly known as “Pegasus” — can be traced back to the Israeli cyber surveillance company, NSO Group.
  • Radi is an investigative journalist who co-founded the local news site Le Desk, a partner with the Star in the International Consortium of Investigative Journalists. He specializes in the connections between politicians and business people as well as social movements and human rights. In other words, he’s a thorn in the government’s side and a prime target for surveillance, hacking and harassment.
  • “The Moroccan authorities are buying every possible and imaginable surveillance and espionage product. They want to know everything.”
  • NSO Group, which was valued at $1 billion USD last year, sells surveillance software to governments and law enforcement agencies intended to combat terrorism. Over the last several years, however, reports from around the world have implicated NSO Group’s spyware in the targeting of journalists and human rights activists.
  • A recent report by The Citizen Lab at the University of Toronto’s Munk School identified 13 journalists, including a reporter for the New York Times, targeted by Pegasus software employed by the Mexican and Saudi Arabian governments.
  • what makes Radi’s case unique is that he was infected last September, only three days after the Israeli company issued a policy that vowed the company would cut off clients if they were found to misuse the surveillance technology to target journalists and human rights activists
  • Amnesty’s new report notes that the NSO server used to hack Monjib and El Bouchattaoui was shut down shortly after the previous report was made public. Shortly afterward, a new server that operated in the same manner was set up and used to hack Radi’s phone, the report said.
  • This month, an article on the Moroccan news website Chouftv reported that Radi was part of a group of journalists organizing a support campaign for an imprisoned colleague. Radi says the article contained details taken from conversations he had on the encrypted apps Signal and WhatsApp, and he suspects government intelligence officers leaked the information gleaned from his phone.“It’s a way of saying: ‘You are being watched,’ ” he said.Radi’s sources have grown more reluctant to talk as it has become evident that journalists’ phones are being tapped.
Ed Webb

U.S. Needs to Look Beyond Russia for Disinformation Culprits | Time - 0 views

  • Russian disinformation may come first to mind for interfering in U.S. politics, but some of the most damning evidence of efforts to influence the American public leads to Washington’s allies in the Middle East. Saudi Arabia and the United Arab Emirates are at the forefront of undermining democratic deliberation–from manipulating the impact of Donald Trump’s tweets, to tricking editors across the world into publishing propaganda.
  • The FBI in 2019 found evidence that employees at Twitter’s San Fransciso headquarters, groomed with bribes such as luxury watches, were co-ordinating with members of the Saudi royal family to obtain private information from Twitter users. In August 2022, a jury found one of these men guilty. Two others couldn’t be tried because they were in Saudi Arabia.
  • One of the most audacious deception operations appeared to be connected to the UAE. Between 2019 and 2021, op-eds that supported the foreign policy position of the UAE, Saudi, and the U.S. administration under Trump began appearing in numerous well-known U.S. outlets, such as Newsmax, The National Interest, The Post Millennial and the Washington Examiner. The catch: The journalists writing them did not actually exist.
  • ...3 more annotations...
  • Cambridge Analytica’s parent company, SCL Social Limited, worked with the UAE to create a social media advertising campaign attacking Qatar, a Gulf rival that’s home of the largest U.S. military base in the region. Though better known its use of “soft power” through projects like Al Jazeera, Qatar has also been reported to use disinformation, as well as allegedly hacking the email of the Emirates’ powerful ambassador to Washington.
  • the Emiratis worked with ex-NSA spies to hack the devices of U.S. citizens. And both Saudi Arabia and the UAE are among the biggest customers of NSO, the Israeli firm that sells the spyware Pegasus, which they have used to target dozens of activists, journalists and academics
  • In 2011, during the heady days of the Arab Spring, social media and digital technology was touted as the force that would help liberate the region from authoritarian rule and bring democracy. Now, authoritarian regimes in the Gulf, along with Western companies and expertise, are using digital technology and social media to try and hack democracy wherever they find it, including in the U.S. The effect is clearest, however, in the Middle East. With critics silenced through incarceration, surveillance, torture, or death, opposition voices are increasingly fearful of self-expression, meaning that the digital public sphere is simply a space to praise the regime or engage in banal platitudes.
Ed Webb

An Uncertain Future for Jordanian Youth - POMED - 0 views

  • Jordan’s strategic relationships and regional importance continue to win it unmatched financial support from the international community. And as a result, the government has felt little urgency or pressure to undertake real reform or respond to the legitimate demands of its youth. With trust between the youth and the regime low and the perception of corruption high, however, remaining complacent carries grave risks for the country’s stability.
  • “Economic optimism is scant, particularly among the youth,” the Arab Barometer found, adding that the economic crisis was “leading many to consider migration despite global travel restrictions.”
  • the rate of suicide in Jordan has also increased over the past few years amid the dire economic conditions. In 2020, the rate was the highest in 10 years and 45 percent higher than the year before, with one suicide on average every other day. After university graduates threatened earlier this year to commit mass suicide over widespread unemployment, Jordan’s parliament passed legislation criminalizing suicide and attempts to commit suicide in a public place, doubling the fine if it is a mass suicide attempt.
  • ...8 more annotations...
  • There are more than 6.5 million internet and social media users in Jordan, the majority of whom are youth, out of a population of roughly 11 million. Jordanians are avid social media users, and over the years have used Facebook, WhatsApp, and other platforms to share news not broadcast on state-controlled channels, jokes targeting the regime, and rumors about the myriad political and corruption scandals circulating across the country on a regular basis
  • Cybercrimes Law No. 27/2015 is a popular regime tool used to control expression online. Article 11 regulates expression on online platforms such as Facebook, Twitter, and blogs. In April 2019, parliament introduced amendments to the law to criminalize the act of spreading “rumors” and “hate speech,” extending to the use of private messaging apps such as WhatsApp. The latest amendments define hate speech as “every writing and every speech or action intended to provoke sectarian or racial sedition, advocate for violence, or foster conflict between followers of different religions and various components of the nation.” And under the cybercrime law, Jordanians will face a criminal penalty if they are convicted of “sending or resending or disseminating information through the Internet or website or any information system that includes defamation, slander or libel against any person.” Between 2019 and 2020, the cases brought under the cybercrime law exceeded two thousand, more than double the number from the year before. In 2022, there have been more arrests under charges of “spreading false news,” including the detentions of several high-profile journalists.
  • Even the Jordanian National Center for Human Rights, a semi-governmental organization, wrote in its own recent annual report that “the detention of individuals for what they express is continuing.” Alarmingly, a recent Citizen Lab and Front Line Defenders joint report confirmed that two operators, “likely agencies of the Jordanian government,” used the NSO Group’s Pegasus spyware to hack the phones of at least four Jordanians, including a human rights defender, a lawyer, and a journalist. 
  • Loosely formed groups of youth activists, often described with the term hirak (“movement”), organize in various neighborhoods and towns across Jordan around shared issues. In 2019, a workshop looking at youth activism across the Middle East and North Africa found that youth activism does not adhere to formalized structures of organizing, such as political parties, professional associations, and civil society organizations.
  • we have seen youth movements in the past decade break the generations-old divisions of urban versus rural and West Bank versus East Bank
  • organizing around their shared frustrations over unchecked levels of corruption, perpetual over-education combined with underemployment, and restrictions on what they can write on social media or when they can gather.
  • the attitudes of ruling elites and public officials toward youth are dismissive
  • the many initiatives launched over the years have not ever been driven by local youth demands, but rather have been top-down, buzzword-filled projects, centralized within the newly created Ministry of Youth, with little to no popular support or participation
Ed Webb

Is Oman ready to mourn Qaboos? - 0 views

  • Despite maintaining a low profile, Oman remains an extremely important regional actor, particularly as it is on good terms with both Iran and the Saudi-West alliance. In particular, Oman was the only gulf state to recognise the 1979 peace agreement between Egypt and Israel and more recently it has played a significant role in supporting the P5+1 talks over Iran's nuclear programme, including hosting the latest round of talks.
  • the Sultan rules through decree and occupies several positions at the top of government
  • Oman has managed to cultivate a reputation as the "world's most charming police state".
  • ...6 more annotations...
  • the Oman 2020 plan, launched in 1995. With the goal of diversifing the economy away from hydrocarbons and increasing the ratio of nationals in public and private employment to 95 per cent, from 68 per cent in 1996. However, these two goals have proven somewhat contradictory. The high rate of foreign labour in both the public and private sectors has increased since 2009 when a Free Trade Agreement with the US came into force– more than doubling the 2005 figure. High rates of unemployment, low wages and the concentration of wealth among elites aligned to the government were contributing factors to the popular unrest of 2011-12.
  • Oman faces a number of pressing, and distinctly Omani-challenges in the immediate and mid-term
  • if we follow the categorisation of the region's regimes discussed by Henry and Springborg in Globalization and the Politics of Development in the Middle East, we can see that Qaboos' Oman represents an almost completely different approach to government from most other regimes in the region. Indeed, it reflects neither the kind of practices of a bunker state – associated with rule "through military/security/party structures that are in turn controlled by alliances of these leaders' families and tribes", such as was the case in Salah's Yemen, Assad's Syria or Gaddafi's Libya – nor the kind of "bully praetorianism" which characterised the kleptocratic regimes of Ben Ali's Tunisia, Mubarak's Egypt or the PLO/PA under Arafat. Moreover, it also differs from the strife riddled monarchies in Riyadh and Manama particularly in as much as the ruling family has not gone out of its way to ostracise, exclude and oppress particular sections of the population. Instead, according to Henry and Springborg, "being the sole GCC ruler without a solid family and tribal base ... [Qaboos' Oman has] been the most assiduous in seeking to build an identity that simultaneously glorifies the Sultan himself".
  • Under a 1996 constitutional provision a council comprising members of the ruling family and senior officials is granted three days from the Sultan's death to choose a successor. If this process fails to provide a clear transition, then a contingency plan would be activated. This, as Qaboos himself told Foreign Affairs in a 1997 interview, would mean that: "As for a successor, the process, always known to us, has now been publicised in the Basic Law. When I die, my family will meet. If they cannot agree on a candidate, the Defence Council will decide, based on a name or names submitted by the previous sultan. I have already written down two names, in descending order, and put them in sealed envelopes in two different regions."
  • 49 per cent of residents under the age of 20
  • some dissatisfaction arose during the height of the uprisings across the region in 2011-12. Though initially it appeared that Qaboos had handled popular protests deftly – through increased public sector spending, and some political reorganisation and an anti-corruption campaign – frustration at the slow pace of reform contributed to strikes by workers at Petroleum Development Oman and protests elsewhere. Authorities countered with arrests and a draconian crackdown on freedom of speech including hacking the social media accounts of intellectuals involved in the protest
Ed Webb

Ethiopia and Egypt Are Already at War Over the Nile Dam. It's Just Happening in Cybersp... - 0 views

  • the group calling themselves the Cyber_Horus Group in late June hacked more than a dozen Ethiopian government sites, replacing each page with their own creation: an image of a skeleton pharaoh, clutching a scythe in one hand and a scimitar in the other. “If the river’s level drops, let all the Pharaoh’s soldiers hurry,” warned a message underneath. “Prepare the Ethiopian people for the wrath of the Pharaohs.”
  • Rarely have young people been so passionate about an infrastructure project. But the Grand Ethiopian Renaissance Dam, which will be Africa’s largest, is more than just a piece of infrastructure. It has become a nationalistic rallying cry for both Ethiopia and Egypt—two countries scrambling to define their nationhood after years of domestic upheaval. Many Ethiopians and Egyptians are getting involved in the only way they can—online—and fomenting the first African cyberconflict of its kind, one with far-reaching and long-lasting consequences.
  • Tensions escalated this year, as the U.S.-brokered negotiations between Ethiopia and Egypt unraveled and new talks mediated by the African Union began
  • ...15 more annotations...
  • Today, there are several entries for the GERD on Google Maps, most earning middling 3 to 4 stars ratings, buoyed by five-star ratings with feedback such as, “One of the great architectural dam in the World!” but weighed down by one-star complaints including, “You’re gonna make us die from thirst.”
  • Social media users from the two countries frequently collide on the Internet, but seem to do so most often on Adel el-Adawy’s Twitter page: As a member of a prominent Egyptian political dynasty, a professor at the American University in Cairo, and the most visible disseminator of the Egyptian perspective on the dam in English, he has amassed a significant following. Adawy, whose pinned tweet is a picture of himself shaking hands with Egyptian President Abdel Fattah al-Sisi, posts frequently about the Nile and Ethiopian affairs, especially when things get sticky.
  • Construction of the dam was completed in July, and the filling of its reservoir started soon after amid heavy rains but before an agreement between Ethiopia, Egypt, and Sudan was signed. The U.S. government, a top source of aid for both Ethiopia and Egypt, said in August that it would halt some aid to Ethiopia over what it saw as a unilateral move to progress with the dam.
  • It’s possible that the engagement is coming from concerned Ethiopians at home and abroad, at the encouragement but not the behest of Ethiopian officials. “I have friends who joined Twitter just for the sake of this. It’s highly emotional and nationalistic,” said Endalkachew Chala, an Ethiopian communications professor at Hamline University in Minnesota.
  • The Ethiopian government does broadly engage in “computational propaganda,” according to a 2019 report from the Oxford Internet Institute. Agencies there use human-run social media accounts to spread pro-government propaganda, attack the opposition, and troll users. The same goes for the Egyptian government.
  • the first known time these kinds of digital tools have been used by people from one African country against people from another, said Gilbert Nyandeje, founder and CEO of the Africa Cyber Defense Forum. “It only means one thing. It means we should expect this more and more.”
  • at the core of Egyptian identity is the Nile, so bolstering nationalism means defending the Nile, too. And officials have encouraged this outlook: One sleekly produced video shared on Facebook by the Ministry of Immigration and Egyptian Expatriates Affairs warned, “More than 40 million Egyptians are facing the threat of drought and thirst.… The cause of water shortage is Ethiopia building a dam five times bigger than its needs.”
  • For both countries—Egypt since the 2011 fall of Mubarak and Ethiopia since the 2012 death of strongman Prime Minister Meles Zenawi—national identity has been in flux
  • a show of vulnerability rare in Arab power politics. But the strategy has helped garner global sympathy for Egypt, even as its Nile claims are framed by Ethiopia as the result of unjust colonial-era agreements in which Egypt’s interests were represented by British colonizers.
  • the dam provided a unifying issue around which Ethiopians of all ethnic backgrounds could rally. “We do have a lot of divisions—ideological, ethnic, tribal, religious,” said Chala, the Ethiopian professor. “But even though we have these bitter divisions, Ethiopians have overwhelmingly supported this Nile dam especially on social media.”
  • Ethiopian officials, meanwhile, continue to encourage Ethiopians to post about the dam online and often use the #ItsMyDam hashtag in their own social media posts. This use of social media to rally around the dam has also meant that Ethiopia’s massive global diaspora can get involved, without having to worry about frequent in-country Internet shutdowns that otherwise curtail online movements there.
  • The thousands of Ethiopian refugees, asylum seekers, and migrants living in Egypt are now facing greater pressure and harassment from Egyptian citizens and authorities since the dam tensions started to heat up
  • in Ethiopia, it has meant that any domestic criticism of the dam from an environmentalist point of view—namely, that it could disrupt ecosystems and biodiversity, even within Ethiopia—is met with derision
  • for both countries, surging nationalist sentiment means that it’s harder for officials to agree to, and for the public to accept, compromise
  • the main sticking points now are related to dispute resolution, drought contingency plans, and future upstream projects. And yet, much of the online rhetoric remains maximalist, even rejecting items that have already been unanimously decided—such as the existence of an Ethiopian Nile dam in any form—raising the possibility that the online tensions and attacks may not subside anytime soon
Ed Webb

World Cup host Qatar used ex-CIA officer to spy on FIFA | AP News - 0 views

  • a trend of former U.S. intelligence officers going to work for foreign governments with questionable human rights records
  • “Pickaxe,” which promised to capture “personal information and biometrics” of migrants working in Qatar. A project called “Falconeye” was described as a plan to use drones to provide surveillance of ports and borders operations, as well as “controlling migrant worker populations centers.”“By implementing background investigations and vetting program, Qatar will maintain dominance of migrant workers,” one GRA document said.
  • The private surveillance business has flourished in the last decade in the Persian Gulf as the region saw the rise of an information war using state-sponsored hacking operations that have coincided with the run-up to the World Cup.
  • ...2 more annotations...
  • Chalker declined requests for an interview or to answer detailed questions about his work for the Qatari government. Chalker also claimed that some of the documents reviewed by the AP were forgeries.
  • The AP took several steps to verify the documents’ authenticity. That includes confirming details of various documents with different sources, including former Chalker associates and soccer officials; cross-checking contents of documents with contemporaneous news accounts and publicly available business records; and examining electronic documents’ metadata, or digital history, where available, to confirm who made the documents and when. Chalker did not provide to the AP any evidence to support his position that some of the documents in question had been forged.
Ed Webb

Opinion | Ghada Oueiss: I won't be silenced by online attacks and trolling - The Washin... - 0 views

  • This was not the first time that I had been subjected to cyberbullying or a coordinated campaign against me on social media. But this time, it appeared the attackers had hacked my phone. Just days later, reports emerged that Saudi dissident Omar Abdulaziz had received new warnings from the Canadian police that he was under threat. Coupled with the hate-filled, obscene language coming from Twitter-verified accounts, this attack shook me to the core.
  • Like almost all of the Saudi accounts attacking me, the majority of Algharibi’s Twitter timeline is filled with tweets praising Saudi Crown Prince Mohammed bin Salman.
  • Almost all of the accounts abusing me displayed the Saudi flag, a picture of MBS, as the Saudi crown prince is often known, or a photograph of Abu Dhabi’s Crown Prince Mohammed bin Zayed. Saudi and Emirati public figures, including Dhahi Khalfan, former head of Dubai Police; Naif Al-Asaker, a mufti at the Saudi Ministry of Islamic Affairs and a close ally to MBS; and Hamad Al-Mazroui, a close associate of the UAE crown prince, amplified these posts, which led to ordinary Saudis and Emiratis joining the assault. Within hours, the hashtags #Ghada_Jacuzzi and #Ola_Sauna were trending in Saudi Arabia, Twitter’s fifth-largest market.
  • ...4 more annotations...
  • Although I was the target of this latest assault — no doubt because I regularly present critical reporting about Saudi Arabia and the UAE — the message to journalists across the Middle East is very clear: Don’t criticize the crown princes.
  • There has been a disturbing rise in gender-related harassment and threats against female public figures. The movement for women’s rights in Saudi Arabia has terrified the government, which has insisted on doling out reforms on its own terms while detaining the female activists behind the movement. Loujain al-Hathloul, the most prominent of the Saudi women campaigners, and several others remain behind bars.
  • Last Friday, a Turkish court began hearings on Post contributing columnist Jamal Khashoggi’s murder — a stark reminder that justice has still not been served two years on. Jamal himself once warned me to ignore and block these Twitter accounts. Even though the man widely believed to be responsible for Jamal’s murder may never be held to account, we must not let him and those who work for him imperil one of the fundamental pillars of a free society — a free press.
  • Twitter and other social media sites must take action to protect journalists such as myself and ensure that its platform is no longer misused by authoritarian regimes.
1 - 8 of 8
Showing 20 items per page