ICE acquires Israeli spyware capable of hacking phones and encrypted apps (www.newarab.com)
from PorcupineSlippers@lemmy.ml to privacy@lemmy.ml on 03 Sep 20:47
https://lemmy.ml/post/35636343

ICE acquires Israeli spyware capable of hacking phones and encrypted apps

ICE has reactivated a $2M contract for Israeli spyware Graphite, sparking fears of civil liberties after previous cases of misuse

Under Trump, ICE has seen its operations and powers vastly expanded [Getty] US Immigration and Customs Enforcement (ICE) are moving ahead with a multimillion-dollar contract for powerful Israeli-made spyware capable of hacking phones and encrypted messaging apps, drawing criticism from civil liberties groups and surveillance experts.

The $2 million deal with Paragon Solutions, the Israeli firm behind the Graphite spyware suite, was initially signed under the Biden administration in late 2024 but paused amid compliance reviews over privacy and security concerns.

According to The Guardian, the Trump administration has now lifted the pause, restoring ICE’s access to the tool and sparking a fresh debate over government surveillance powers.

Paragon’s Graphite software allows agencies to remotely penetrate smartphones, access encrypted applications such as WhatsApp and Signal, extract data, and even covertly activate microphones to turn devices into listening tools.

Critics warn the technology gives unprecedented surveillance capabilities to US immigration authorities at a time of heightened political and public scrutiny over civil liberty abuses by ICE.

The Washington Post reported that the pause was lifted following changes in Paragon’s ownership structure and the completion of federal regulatory reviews. The decision comes despite mounting evidence from rights groups and cybersecurity researchers about the risks of misuse, including against journalists and activists.

Earlier this year, researchers at the Citizen Lab, a cybersecurity watchdog based at the University of Toronto, discovered Graphite had been used to target the devices of journalists in Italy, including reporters from Fanpage.it, prompting a European investigation.

Italian officials denied any wrongdoing, but the revelations highlighted the growing global market for so-called “mercenary spyware” and the lack of transparency surrounding its deployment.

Related As ICE raids rise across US, attorney warns people to prepare

US affairs Brooke Anderson In Washington, civil liberties advocates have expressed alarm over the implications of ICE regaining access to such invasive technology. Nadine Farid Johnson, policy director at the Knight First Amendment Institute at Columbia University, urged lawmakers to act.

“Reports that ICE has renewed its contract with spyware vendor Paragon compounds the civil liberties concerns,” Johnson said in a statement last week.

“Spyware like Paragon’s Graphite poses a profound threat to free speech and privacy. Congress must step in to impose clear limits and safeguards before these tools are used in ways that undermine constitutional rights.”

The Guardian reported that ICE officials have defended the contract, insisting the spyware is used strictly for law enforcement purposes, such as targeting transnational criminal networks and human trafficking operations.

However, critics point to the lack of independent oversight mechanisms and the absence of public information about how frequently or against whom the software is deployed.

The Washington Post added that the reactivation of the Paragon deal may signal a more permissive stance by the Trump administration toward domestic surveillance technologies.

Past controversies over the use of spyware such as Pegasus, developed by the Israeli firm NSO Group, have already prompted calls for stricter regulation. The Biden administration previously blacklisted NSO after its tools were linked to the hacking of US diplomats’ phones.

Under Trump, ICE has seen dramatically expanded powers and funding, fuelling concerns about its growing politicisation.

Critics point to sweeping arrests, including of non-criminal migrants, and the use of tactics once considered off-limits, such as unmarked vehicles and plainclothes agents. Civil liberties groups warn that without oversight, the agency risks becoming a tool of political intimidation rather than law enforcement, especially with access to powerful surveillance technologies.

#privacy

threaded - newest

ComradePedro@lemmy.ml on 03 Sep 21:17 next collapse

Fight Graphite with Graphene!

mp3@lemmy.ca on 03 Sep 21:56 next collapse

And more importantly, good OPSEC.

mugita_sokiovt@discuss.online on 03 Sep 22:43 collapse

On top of that, a local-first approach.

Cat_Daddy@hexbear.net on 03 Sep 23:30 next collapse

Does that work, though? It’s just a modified AOSP, so it might have the same issues as vanilla android.

sunzu2@thebrainbin.org on 04 Sep 00:39 next collapse

It is the only one that was giving celebrite hard time last year.

But we don't really know.

But we deff know that others stand no chance.

porous_grey_matter@lemmy.ml on 10 Sep 21:35 collapse

Most of the modifications to aosp in graphene are security improvements, so it’s at least somewhat better than any other android

SolarPunker@slrpnk.net on 04 Sep 14:03 collapse

The problem is WhatsApp

amanneedsamaid@sopuli.xyz on 03 Sep 21:35 next collapse

With my tax money… and only a negative impact on the average americans life…

birdwing@lemmy.blahaj.zone on 04 Sep 00:04 collapse

Everyone’s*.

When Trump does something, the rest of the world experiences the antisocial oligarch pedo’s ruffles.

bobbyfiend@lemmy.ml on 04 Sep 03:28 collapse

Since you (like me) are pedantic about apostrophes, I’ll be pedantic about “pedo.” There’s no evidence Trump is a pedopile–that is, primarily attracted to children who have not yet reached puberty.

Plenty of evidence strongly suggesting he’s a child molester, though.

irotsoma@lemmy.blahaj.zone on 03 Sep 22:29 next collapse

I don’t really get how that’s helpful for ICE. They don’t investigate crime really. Shouldn’t they know a person’s immigration status based on their public records? What do they need private communications for to prove a person is in the country illegally?

This is a rhetorical question. I know why they want it, just it doesn’t make sense for them to spend our money on for the things they’re supposed to be tasked with doing.

quick_snail@feddit.nl on 04 Sep 07:52 collapse

They are the US fascist gustapo. Their funding just exploded, and so will their mission

Mongostein@lemmy.ca on 03 Sep 23:15 next collapse

So how does Graphite work?

birdwing@lemmy.blahaj.zone on 04 Sep 00:04 next collapse

Hold up, accessing Signal?

tapdattl@lemmy.world on 04 Sep 00:18 next collapse

Well I’m assuming if it can bypass the lock screen somehow it can pull encryption keys, or just let the user gain full access to the phone and open the signal app directly.

birdwing@lemmy.blahaj.zone on 04 Sep 00:21 collapse

That’s fucking scary. Trump, Thiel, and every single fascist ally of him needs to get a treatment of eternal sleep.

quick_snail@feddit.nl on 04 Sep 07:53 collapse

If they breach the endpoint, it doesn’t matter if it’s e2ee.

Just avoid putting a sim card in your phone, and it eliminates almost all of these vectors.

birdwing@lemmy.blahaj.zone on 04 Sep 12:15 collapse

So, what you’re saying, is that one would have to use an e-sim rather than physical sim? To avoid a zero-day exploit? I find that hard to believe.

quick_snail@feddit.nl on 04 Sep 16:17 collapse

Jesus no. I’m saying almost all of the exploits found by citizen lab are delivered by cell tower.

Don’t connect to cell towers.

pineapplelover@lemmy.dbzer0.com on 04 Sep 17:17 collapse

I find it hard to believe that they can decrypt Signal messages in-transit at the cell tower

quick_snail@feddit.nl on 04 Sep 20:49 collapse

They can’t. They have zero days that push vulnerabilities down to you from the tower.

grey_maniac@lemmy.ca on 04 Sep 00:31 next collapse

Isn’t ICE itself functionally a human traffic organization already?

sunzu2@thebrainbin.org on 04 Sep 00:38 next collapse

Grapheneos is over kill for the normies 🤡

pineapplelover@lemmy.dbzer0.com on 04 Sep 17:18 collapse

Lockdown mode on iphone is fine as well

quick_snail@feddit.nl on 04 Sep 07:51 next collapse

Don’t put a Sim card in your phone, folks.

Never take your phone out of airplane mode. Use WiFi.

pineapplelover@lemmy.dbzer0.com on 04 Sep 17:16 collapse

What’s wrong with sim cards?

quick_snail@feddit.nl on 04 Sep 20:50 collapse

Broadband processors on your device are extremely vulnerable black boxes. Almost all of the attacks that Citizen Lab discovered come from this vector.

By not using a Sim card, you significantly decrease the surface area for attack, making yourself invulnerable to the majority of these zero days

DieserTypMatthias@lemmy.ml on 05 Sep 06:31 next collapse

And also, the safest device is the one that’s not connected to the Internet.

pineapplelover@lemmy.dbzer0.com on 05 Sep 07:12 collapse

So it’s not that esims are much safer, you’re talking about cellular as a whole?

quick_snail@feddit.nl on 05 Sep 15:32 next collapse

I’m not 100% sure, but I think the vulnerability is in the broadband processor.

sunzu2@thebrainbin.org on 05 Sep 21:27 collapse

correct.. i am sure there is some difference between sim and esim but the real issue is connecting to cell network. it is designed to spy on you.

Ileftreddit@lemmy.world on 04 Sep 17:49 next collapse

Is it just me or is getting all that for $2 million a pretty great deal? Still not cool, but I’d have thought the ability to totally eliminate privacy would have been more expensive

strung6387@lemmy.ml on 05 Sep 04:50 collapse

It’s not clear how the spyware gets onto the phone, though. Typically the user needs to download something that happens to have spyware in it. Unless the USA government includes this spyware in heretofore legitimate government apps so that a significant number of people install the spyware unintentionally, I don’t see how this spyware is of practical value. Including it in government apps might be their plan, though, even though there is a high chance that the malicious app(s) would be banned. But the USA government could threaten Apple or Google into letting the app remain available for download. Dark times.

Ileftreddit@lemmy.world on 05 Sep 21:15 collapse

The US govt could just require it to be pre-installed on all devices

RhondaSandTits@lemmy.sdf.org on 05 Sep 00:45 next collapse

Those meatheads will use it as another tool to abuse their wives and extract nudes from the classmates of their 15yo daughters

sunzu2@thebrainbin.org on 05 Sep 21:26 collapse

That's just the pork of the job...

They are the boot of the regime first and foremost.

Dreaming_Novaling@lemmy.zip on 05 Sep 03:26 next collapse

So like, genuine question to all of those saying no sim cards/e-sims and only use wifi with airplane mode on, how do you communicate with people on the go? Do you just wait until you’re at a building with free Wi-Fi?

sunzu2@thebrainbin.org on 05 Sep 21:25 collapse

Not serious proposal at this point but you can at least turn off the cell nework when home etc.

it is about harm reduction just like drug use.

cupcakezealot@piefed.blahaj.zone on 05 Sep 15:33 next collapse

that's a good way to get a lawsuit and inadmissible evidence.

DieserTypMatthias@lemmy.ml on 05 Sep 15:48 collapse

Didn’t Paragon work in the Linux kernel on NTFS drivers?