Google: Governments need to do more to combat commercial spyware | CyberScoop<\/title> <meta name=\"description\" content=\"The commercial spyware industry continues to supply highly advanced surveillance capabilities despite efforts to better regulate it.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/google-governments-need-to-do-more-to-combat-commercial-spyware\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Google: Governments need to do more to combat commercial spyware\"> <meta property=\"og:description\" content=\"The commercial spyware industry continues to supply highly advanced surveillance capabilities despite efforts to better regulate it.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/google-governments-need-to-do-more-to-combat-commercial-spyware\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2024-02-06T10:00:00+00:00\"> <meta property=\"article:modified_time\" content=\"2024-02-05T22:21:26+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1202\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"AJ Vicens\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@AJVicens\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1706643139g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/_static\/??\/wp-content\/mu-plugins\/search\/elasticpress-next\/dist\/css\/related-posts-block-styles.min.css,\/wp-content\/plugins\/embedpress\/Gutenberg\/dist\/blocks.style.build.css?m=1706739156\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/_static\/??\/wp-content\/plugins\/embedpress\/assets\/css\/embedpress.css,\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1706739156\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=b50a7fc68d02387a0cbc\" media=\"all\">\n<link rel=\"stylesheet\" id=\"all-css-10\" href=\"https:\/\/cyberscoop.com\/_static\/??\/wp-includes\/css\/dashicons.min.css,\/wp-content\/plugins\/embedpress\/assets\/css\/plyr.css?m=1706739156\" type=\"text\/css\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/79062\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.4.3\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=79062\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fgoogle-governments-need-to-do-more-to-combat-commercial-spyware%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fgoogle-governments-need-to-do-more-to-combat-commercial-spyware%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-79062 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/google-governments-need-to-do-more-to-combat-commercial-spyware\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"24.870550161812\">\n<div class=\"single-article__header-content\" readability=\"30.365546218487\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/news\/technology\/\"> <span>Technology<\/span> <\/a> <\/li>\n<\/ul>\n<p> The commercial spyware industry continues to supply highly advanced surveillance capabilities despite efforts to better regulate it. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"401\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware.jpg?resize=640%2C401&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=300,188 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=768,481 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=1024,641 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=1536,962 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=600,376 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=268,168 268w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=538,337 538w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=1078,675 1078w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-2.jpg?resize=1347,843 1347w\" sizes=\"(max-width: 1078px) 100vw, 1078px\"><figcaption> A developer works on a late-night project. (PeopleImages\/Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"39.73883161512\"><body readability=\"80.298305084746\"><\/p>\n<p>Google researchers focused on the most complex hacking threats argued in <a href=\"https:\/\/blog.google\/threat-analysis-group\/commercial-surveillance-vendors-google-tag-report\/\">a report published Tuesday<\/a> that governments around the world should take more aggressive steps to combat the growth of a commercial spyware industry that is continuing to supply governments with invasive malware used to target journalists, human rights defenders, dissidents and political opponents.<\/p>\n<p>Responsible for combating the most sophisticated threats to Google users, the company\u2019s Threat Analysis Group said in their report that they are currently tracking roughly 40 commercial spyware vendors \u2014 an indication of how the industry has grown and advanced spyware capabilities have proliferated. The report notes that the industry is fluid with new companies opening shop every year and established ones reincorporating under new names.<\/p>\n<p>Commercial spyware vendors enable highly effective and targeted surveillance for governments that may not have the in-house cyber expertise. These firms devote exceptional resources to weaponize previously undetected vulnerabilities \u2014 tracked in the industry as \u201czero-days\u201d \u2014 and make them available to clients for use in surveillance. <\/p>\n<p>\u201cIf governments ever had a monopoly on the most sophisticated capabilities, that era is certainly over,\u201d the researchers wrote, noting that 20 of the 25 in-the-wild zero-days Google TAG discovered in 2023 were exploited by commercial spyware vendors.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Tuesday\u2019s report welcomed efforts by the U.S. government to crack down on such vendors \u2014 including a 2023 executive order limiting U.S. government use of spyware and sanctions against key vendors \u2014 but said more could be done to regulate an industry implicated in widespread human rights abuses. <\/p>\n<p>The report recommends that the U.S. government share more information about the implementation of its efforts thus far, as well as \u201csetting heightened transparency requirements for the domestic surveillance industry, and setting an example to other governments by reviewing and disclosing its own historical use of these tools.\u201d <\/p>\n<p>The researchers also called on the U.S. government to impose \u201cfurther sanctions to limit spyware vendors\u2019 ability to operate in the U.S. and receive U.S. investment. The harms from this industry are amply evident by this point, and we believe they outweigh any benefit to continued use.\u201d<\/p>\n<p>On Monday, the <a href=\"https:\/\/cyberscoop.com\/visa-travel-commercial-spyware\/\">U.S. State Department announced<\/a> it would begin denying visas for people seeking to travel to the U.S. who have been implicated in the misuse of commercial spyware. But the practical effect of the policy is not clear, and an anonymous administration official told reporters the move represents \u201can important signal to those involved in this industry.\u201d<\/p>\n<p>Despite a litany of government, NGO and journalistic reports in recent years documenting how commercial spyware firms have sold surveillance capabilities to governments that have gone on to use them against dissidents, opposition politicians and journalists, the industry\u2019s key players continue to be implicated in human rights abuses. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Last week, for instance, <a href=\"https:\/\/www.hrw.org\/news\/2024\/02\/01\/spyware-targets-human-rights-watch-staff-jordan\">Human Rights Watch reported<\/a> that two of its staffers in Jordan, along with devices connected to at least 33 Jordanian and Jordan-based journalists, activists, and politicians, were targeted with NSO Group\u2019s Pegasus spyware <a href=\"https:\/\/www.accessnow.org\/press-release\/pegasus-spyware-jordan\/\">between 2019 and 2023<\/a>.<\/p>\n<p>Among the case studies included in Tuesday\u2019s report is Carlos Dada, the co-founder and director of Salvadoran investigative news outlet El Faro. Dada\u2019s phone and those belonging to 21 of his colleagues were infected with Pegasus by an unknown government client between June 2020 and November 2021, <a href=\"https:\/\/citizenlab.ca\/2022\/01\/project-torogoz-extensive-hacking-media-civil-society-el-salvador-pegasus-spyware\/\">according to a Citizen Lab analysis<\/a>.<\/p>\n<p>Suspicion immediately fell to the government of El Salvador, led by President Nayib Bukele. El Faro staffers sued NSO Group in U.S. federal court in December 2022, demanding to know who the client was. That case is currently working its way through federal court in the Northern District of California.<\/p>\n<p>The Bukele government has <a href=\"https:\/\/www.bbc.com\/news\/world-latin-america-59979073\">denied any connection<\/a> to NSO Group or the Pegasus spyware. Bukele <a href=\"https:\/\/www.theguardian.com\/world\/2024\/feb\/05\/nayib-bukele-re-elected-as-el-salvador-president-in-landslide-win\">easily won reelection<\/a> earlier this week.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"1.1602564102564\">\n<div class=\"author-card\" readability=\"8\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/02\/google-governments-need-to-do-more-to-combat-commercial-spyware-1.jpg?w=640&ssl=1\" alt=\"AJ Vicens\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by AJ Vicens<\/h4>\n<p> AJ covers nation-state threats and cybercrime. He was previously a reporter at Mother Jones. Get in touch via Signal\/WhatsApp: (810-206-9411). <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Geopolitics<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/google-governments-need-to-do-more-to-combat-commercial-spyware\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google: Governments need to do more to combat commercial spyware<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1468,1469,1271,482,310],"tags":[1470,1471,1274,484,311],"class_list":["post-2484","post","type-post","status-publish","format-standard","hentry","category-google-threat-analysis-group","category-nso-group","category-sanctions","category-spyware","category-technology","tag-google-threat-analysis-group","tag-nso-group","tag-sanctions","tag-spyware","tag-technology"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/google-threat-analysis-group\/\" rel=\"category tag\">Google Threat Analysis Group<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/nso-group\/\" rel=\"category tag\">NSO Group<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/sanctions\/\" rel=\"category tag\">sanctions<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/spyware\/\" rel=\"category tag\">spyware<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/technology\/\" rel=\"category tag\">Technology<\/a>","tag_info":"Technology","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2484","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=2484"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2484\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=2484"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=2484"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=2484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":2484,"date":"2024-02-06T10:00:00","date_gmt":"2024-02-06T10:00:00","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=79062"},"modified":"2024-02-06T10:00:00","modified_gmt":"2024-02-06T10:00:00","slug":"google-governments-need-to-do-more-to-combat-commercial-spyware","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/02\/06\/google-governments-need-to-do-more-to-combat-commercial-spyware\/","title":{"rendered":"Google: Governments need to do more to combat commercial spyware"},"content":{"rendered":"