Slashdot Mirror

← Back to Stories (view on slashdot.org)

Saudi Government Targeting Dissidents With Mobile Malware

Posted by timothy on from the they-don't-go-in-for-a-slap-on-the-wrist dept.

wiredmikey (1824622) writes Human Rights Watch on Friday demanded a clarification from Saudi Arabia over allegations from security researchers that the kingdom is infecting and monitoring dissidents' mobile phones with surveillance malware. The New York-based rights watchdog said surveillance software allegedly made by Italian firm Hacking Team mostly targeted individuals in Qatif district in Eastern Province, which has been the site of sporadic Shiite-led protests since February 2011. "We have documented how Saudi authorities routinely crack down on online activists who have embraced social media to call out human rights abuses," said Cynthia Wong, HRW's senior Internet researcher. "It seems that authorities may now be hacking into mobile phones, turning digital tools into just another way for the government to intimidate and silence independent voices." The accusations against the Saudi Government come days after researchers from Kaspersky Lab and Citizen Lab uncovered new details on advanced surveillance tools offered by HackingTeam [Note: mentioned in this earlier Slashdot story], including never before seen implants for smartphones running on iOS and Android.

41 comments

  1. The Golden Age of Spying by mcolgin · · Score: 3, Insightful

    ...we uttered it first and with every month, there's another example of it. Can you believe we carry around these "ankle tracking" devices in our pockets?!?!

    --
    I made this: http://www.bpftpserver.com
    1. Re:The Golden Age of Spying by Noah+Haders · · Score: 2

      Mobile malware => android malware. The mobile hacking tools profiled earlier this week and assumed to be in play here only work on android and jailbreaked ios. All ios malware in existence relies on users to break their own security first, using tools that come from shadowy overseas orgs. Whaaa? I was haxored? No shit Sherlock. Consider this before choosing your next ankle tracker.

    2. Re:The Golden Age of Spying by m00sh · · Score: 0, Troll

      Mobile malware => android malware. The mobile hacking tools profiled earlier this week and assumed to be in play here only work on android and jailbreaked ios. All ios malware in existence relies on users to break their own security first, using tools that come from shadowy overseas orgs. Whaaa? I was haxored? No shit Sherlock. Consider this before choosing your next ankle tracker.

      What if there is software put in by Apple from a request by the government? That's not malware then?

      What about shadowy domestic orgs who are more powerful and better funded?

    3. Re:The Golden Age of Spying by Anonymous Coward · · Score: 0

      The good news is that since we don't have to carry the darn things, they can be used to spoof our location. "My client was at home that entire night - cellular records confirm that."

    4. Re:The Golden Age of Spying by Anonymous Coward · · Score: 0

      Devil's advocate:

      Can someone show me a single piece of malware, yes, even one, that affects a non-jailbroken iOS device?

    5. Re:The Golden Age of Spying by Noah+Haders · · Score: 2

      ok. on the one hand, a phone platform with proven vulnerabilities in software and hardware that allows users to get owned every which way. On the other hand, a phone platform that has proven to be rock solid and secure against malware. However, the better platform could be owned by a cabal of nefarious actors. so they're basically equivalent, despite one is proven swiss cheese and the other is a made up story.

      put it another way, has any evidence been uncovered of a backdoor of this type? Or is the absence of evidence just more confirmation of secret backdoors?

    6. Re: The Golden Age of Spying by Anonymous Coward · · Score: 1

      The early jailbreaking exploits could be leveraged through browser vulnerabilities alone, no? If those very same holes never ever got used for things other than jailbreaking I'd be surprised. Not a example of malware per-se, just food for thought.

    7. Re:The Golden Age of Spying by m00sh · · Score: 2

      put it another way, has any evidence been uncovered of a backdoor of this type? Or is the absence of evidence just more confirmation of secret backdoors?

      Depends on your definition of backdoor and malware.

      A couple of years ago, security researchers found that Apple kept a log of every place you went and uploaded the entire data to their servers. Apple dismissed it as a bug in the code they wrote but was it really a bug or did they just get caught?

      Also, there are companies that are selling iPhone cracking to the LEOs using "undisclosed vulnerabilities". And of course, Apple will do that by itself.

    8. Re:The Golden Age of Spying by Anonymous Coward · · Score: 0

      iOS

    9. Re:The Golden Age of Spying by Anonymous Coward · · Score: 0

      Not true, too lazy to google, but I remember reading that if its connected to a pc and the pc is infected it can jailbreak the phone and do whatever as long as the phone is unlocked when connected.

    10. Re:The Golden Age of Spying by rtb61 · · Score: 2

      Saudi Mobile Malware, the thing that immediately pops to mind is not electronics but the very mobile terrorist funding cheque books. I know they own large chunks of the US political scene but how the fuck do they continue to get away with funding terrorism on a global scale via their Wahhabist indoctrination centres. There was that whole threat by Russia to directly retaliate against Saudi Arabia if there were any Islamist attacks on the Sochi Olympics and well, they were pretty much trouble free. So why is the US continuing to allow it to happen do a search of 15 of 19 and well the answer really does beg the question of why was nothing done.

      --
      Chaos - everything, everywhere, everywhen
    11. Re:The Golden Age of Spying by Anonymous Coward · · Score: 0

      A couple of years ago, security researchers found that Apple kept a log of every place you went and uploaded the entire data to their servers. Apple dismissed it as a bug in the code they wrote but was it really a bug or did they just get caught?

      Run this through your mind: would this really be continued if suddenly, for every iDevice sold, you (the Company) start getting a deluge of data that you didn't ask for and didn't want? Now you have to spend money on storing and dealing with that data... Imagine the manager/executive in charge of that program having to defend that to his boss/board ("so tell me, why are we spending X millins on dollars again on capturing this data?")... I can't imagine his performance bonus being that great if this were a bug. I think it is fair to operate under the assumption that this wasn't a bug, it was a feature and they got caught red handed. It's as much a bug as Google's snooping on/vacuuming of WiFi signals is a bug.

      Here's a good saying for you "it's not because you're paranoid that they're not after you"

  2. Huh? They can't afford drones w/ Hellfires? by Anonymous Coward · · Score: 0

    Damn, Obama is more barbaric than Saudi Arabia.

  3. Allah says your Flash Player is out of date! by Anonymous Coward · · Score: 0

    All glory to update Java click here....

  4. Re:Naive leftists demand clarification from theocr by Anonymous Coward · · Score: 0

    Jesus christ, I'm a lefty... the amount of wishy washy thinking I see, I'm tempted tp get a T shirt with 'idiot lefty' and parade around - I could hardly do worse than the others that represent us.

  5. detection by Aryeh+Goretsky · · Score: 3, Informative

    Hello,

    The SHA-256 hash for the file is 8e64c38789c1bae752e7b4d0d58078399feb7cd3339712590cf727dfd90d254d.

    According to VirusTotal, at the time the report was released, it was being detected by by the following anti-malware programs:

    • Avira AntiVir - Android/FakeInst.ES.4
    • Baidu-International - Trojan.Android.FakeInst.bES
    • ESET - a variant of Android/Morcut.A
    • Kaspersky - HEUR:Trojan-Spy.AndroidOS.Mekir.a
    • ThreatTrack VIPRE - Trojan.AndroidOS.Generic.A

    Five out of fifty-three program, or a little under 10%. Currently, detection is at 13/53, according to this report.

    Regards,

    Aryeh Goretsky

    --
    Dexter is a good dog.
    1. Re:detection by ShaunC · · Score: 1

      That's good information.

      Now, who has the binaries? Let's get a look.

      --
      Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
    2. Re:detection by Anonymous Coward · · Score: 0

      Yes, but can John detect the binary by taste?

    3. Re:detection by NotInHere · · Score: 1

      This link has even more information.

  6. Re:Don't you know... by ShanghaiBill · · Score: 1, Troll

    Only the U.S. can do that!

    Nonsense. It is perfectly fine for the Saudis to violate human rights because they are an American ally.

  7. Maybe their best friend should talk to them by Mister+Liberty · · Score: 3, Insightful

    ... instruct them about democracy, freedom of speech, religion, separation between church and state,
    dissidents and some other inconveniences, and gently urge them onto the path of good behaviour?

    1. Re:Maybe their best friend should talk to them by Anonymous Coward · · Score: 0

      Or just create a new social media platform intended to protect users from the Saudi government. It could be called .. OsamaNet.

  8. Saudi Arabia? by Anonymous Coward · · Score: 1

    Our second dearest ally in the Middle East?

    Where Kerry is going to ask for help over Iraq? (Now that's funny)

    Suppressing dissidents?

    No! Say it ain't so!

    1. Re:Saudi Arabia? by Anonymous Coward · · Score: 0

      John Kerry is useless and should be thrown out of this county on his lying ass.

    2. Re:Saudi Arabia? by Anonymous Coward · · Score: 0

      You probably know that Saudi Arabia is not an ally of the US. SA is the boss. It has western politicians bribed well enough to get nearly anything it wants. As compared to what the Saudis have available from their oil income, the amount of money needed is very small.

      Israel and SA cooperate to a limited extent, but they are not allies either. Saudi Arabia has long-term plans to destroy Israel, kill all of the Jews, and enslave just about everybody else. But for now, it needs Israeli and US cooperation in its quest to take over all of the Islamic world. And it has been receiving it.

      The Saudis are very good at *looking* friendly and mostly harmless. They don't do their own dirty work. They use their terror networks to put pressure on other countries. The Saudis threatened to have one of their cadres disrupt the Sochi olympics if Russia did not follow orders.

      The Saudis' long-term plans for conquest are available. Look them up.

  9. Re:Naive leftists demand clarification from theocr by Anonymous Coward · · Score: 0

    Aren't you laid to an unsubsidized education?

  10. Re:Muslims are the 21st century Nazis by Anonymous Coward · · Score: 1

    Before wailing on Mohammad, consider the man and what he did.

    It appears the same thing is happening in Islam is what seems to happen in all religion... leadership types see it as a control vector for the populacel and warp it to their own advantage.

    Some of those people are exceedingly evil.

    Think Christianity is immune?

    Turn on the TV, and most of the preacher types there are nothing more than beggars, imploring us to "sow the uncommon seed" to finance bringing the message around the world that they, too, owe some beggar the money they earned to support their family - while our Holy Book tells us quite plainly that when we are sharing His word, we are NOT to carry a begging bag!.

    I am under the strong belief that often what is said "in the name of God" has little to do with what God said, said evidence to support that conclusion provided by those who pontificate using the name of God.

  11. Governments... by Anonymous Coward · · Score: 0, Troll

    Wow, these mid-east extremists are almost as bad as Americans.

  12. Re:Muslims are the 21st century Nazis by Anonymous Coward · · Score: 0

    I thought the NSA were the 21st century Nazis? It's so hard to keep up.

  13. So they consider by Anonymous Coward · · Score: 0

    ...the ones who get infected with mobile malware to be the most dangerous, eh?

    Headline fail.

  14. Re:Muslims are the 21st century Nazis by Anonymous Coward · · Score: 0

    what seems to happen in all religion... leadership types see it as a control vector for the populacel and warp it to their own advantage.

    Don't sound so surprised, this is the point of all religions.

  15. Re:Naive leftists demand clarification from theocr by Nutria · · Score: 1

    Laid to?

    --
    "I don't know, therefore Aliens" Wafflebox1
  16. Re:Naive leftists demand clarification from theocr by Nutria · · Score: 1

    Right-wingers do stuff just as stupid...

    --
    "I don't know, therefore Aliens" Wafflebox1
  17. saudis control the price of oil... by Anonymous Coward · · Score: 0

    The Saudis are the world's swing producer of oil. Saudi Arabia has a large control the price of oil. So, America doing Saudi Arabia's bidding, might be a logical thing. Given that China is now a large consumer of oil, the jump in the price of oil, and electric car technology is now good enough, America might want to rethink it's relationship.

  18. even more pretense of absolution/immunity by Anonymous Coward · · Score: 0

    more media S&M http://www.youtube.com/watch?v=wCWVuCCWqzQ free the innocent stem cells... see you there

  19. Better than being stoned to death by walterbyrd · · Score: 1

    Or having your hands/feet/head cut off. Or being sentenced to 100 lashes. Or being blown up in a terrorist attack.

    As Saudi attacks on infidels go, this seems fairly mild.