Wednesday

27th Sep 2023

EU parliament spyware inquiry eyes Italian firms

  • The investigation revealed Tykelab and RCS Lab were using surreptitious phone network attacks and sophisticated spyware against targets on a global scale (Photo: CAFNR)
Listen to article

European lawmakers probing the Israeli spyware Pegasus may now start looking into Italian firm Tykelab and parent company RCS Lab following media revelations of mass surveillance.

Set up in the wake of the Israeli NSO spy scandal, the Pega inquiry committee gathers information on the extent to which states use intrusive surveillance technology and how such technology undermines human rights.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

Its chair, Dutch liberal MEP Jeroen Lenaers and Pega secretariat told EUobserver in an email ahead of the publication of the investigation, that Tykelab and RCS Lab could become a fresh part of the committee's probe.

"The mandate of the Pega committee is not limited to NSO/Pegasus only, but would clearly cover something like Tykelab and RCS Lab that you mention," said the Pega secretariat, in an email, with Lenaers in copy.

The committee's vice chair, German liberal Moritz Körner, made similar comments.

"We look at different firms and software. So I think Tykelab and RCS Lab could definitely become a topic in the committee," he said.

The investigation by Lighthouse Reports along with media partners Der Spiegel, Domani and Irpimedi , found that both Tykelab and RCS Lab were using surreptitious phone network attacks, and sophisticated spyware, against targets in southeast Asia, Africa and Latin America, as well as inside Europe.

EUobserver was given summary conclusions of those findings ahead of publication, including a snap shot of previously unpublished phone signalling datasets.

The phone-signalling data paints a disturbing picture of surveillance practices that are said to be almost on par with Pegasus, the Israeli software used to infiltrate mobile phones and extract data or activate cameras or microphones.

Such signals expose vulnerabilities in phone networks that in turn give up the locations of phone subscribers.

Although not explicitly highlighted in the Pega inquiry, RCS was still briefly mentioned in a 21 June hearing as part of the spyware industry by Privacy International's Edin Omanovic.

Omanovic at the time said a 2016 analysis had found over 500 firms that sell surveillance technology for government end-users for surveillance.

"They sell a full spectrum of tools ranging from spyware to techniques which take advantage of vulnerabilities in telecomms networks, to spy on people anywhere, to huge internet monitoring tools which sweep up internet traffic on a nationwide level," he said.

There is also a massive regulatory gap and lack of legal redress in case of abuse, said professor Ben Wagner, director of the AI Futures Lab at TU Delft, in comments made at the same hearing.

"We've unleashed an industry that we have not been sufficiently willing as Europeans to regulate," he said.

"Sooner or later this will be misused, whether it's in election campaigns, whether it's in so-called corruption cases," he said.

Firms that make such software often claim it is used to track down criminals or terrorists — including Israel's NSO Group that led to the European Parliament inquiry into Pegasus.

The NSO Group reportedly has active contracts with 12 of the 27 members of the European Union and is now seeking to expand its client base to Nato members, the western defensive alliance of some 30 countries.

But some state actors in the EU and elsewhere are also targeting political opponents and journalists.

The latest scandal ensnared Greek prime minister Kyriakos Mitsotakis earlier this month after it was revealed that state intelligence service EYP tapped the mobile phones of a political opposition leader and a financial journalist who works for CNN Greece.

EYP reports directly to Mitsotakis' office, which has denied any involvement.

Investigation

NSO surveillance rival operating in EU

As European Parliament hearings into hacking scandals resume this week, an investigation led by Lighthouse Reports with EUobserver, Der Spiegel, Domani and Irpimedia reveals the unreported scale of operations at a shady European surveillance outfit.

Pegasus spyware makers grilled by MEPs

"We will not continue to work with a customer that is targeting a journalist illegally," Chaim Gelfand, chief compliance officer of NSO Group told MEPs — but shed little light on EU governments' use of its Pegasus spyware.

Greek PM embroiled in spyware scandal

Greece has become embroiled in a wiretapping scandal that led to the resignation of its intelligence chief as well as the Greek prime minister's top aide.

AI will destroy more female jobs than male, study finds

About four percent of global female employment is subject to potential automation through generative AI technologies, compared to only 1.4 percent of male employment. The trend is even more pronounced in high-income countries, a new study reveals.

Column

EU lobbying clean-up — what happened to that?

Six months after Qatargate, as institutional inertia and parliamentary privileges weigh in, the sense of gravity and collective resolve have all but disappeared. MEPs show little enthusiasm for reform of the rules that today allow them significant outside paid activities.

Latest News

  1. Germany tightens police checks on Czech and Polish border
  2. EU Ombudsman warns of 'new normal' of crisis decision-making
  3. How do you make embarrassing EU documents 'disappear'?
  4. Resurgent Fico hopes for Slovak comeback at Saturday's election
  5. EU and US urge Azerbijan to allow aid access to Armenians
  6. EU warns of Russian 'mass manipulation' as elections loom
  7. Blocking minority of EU states risks derailing asylum overhaul
  8. Will Poles vote for the end of democracy?

Stakeholders' Highlights

  1. International Medical Devices Regulators Forum (IMDRF)Join regulators, industry & healthcare experts at the 24th IMDRF session, September 25-26, Berlin. Register by 20 Sept to join in person or online.
  2. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  3. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  4. International Medical Devices Regulators Forum (IMDRF)Join regulators & industry experts at the 24th IMDRF session- Berlin September 25-26. Register early for discounted hotel rates
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Stakeholders' Highlights

  1. International Sustainable Finance CentreJoin CEE Sustainable Finance Summit, 15 – 19 May 2023, high-level event for finance & business
  2. ICLEISeven actionable measures to make food procurement in Europe more sustainable
  3. World BankWorld Bank Report Highlights Role of Human Development for a Successful Green Transition in Europe
  4. Nordic Council of MinistersNordic summit to step up the fight against food loss and waste
  5. Nordic Council of MinistersThink-tank: Strengthen co-operation around tech giants’ influence in the Nordics
  6. EFBWWEFBWW calls for the EC to stop exploitation in subcontracting chains

Join EUobserver

Support quality EU news

Join us