MEXICO CITY – Mexican journalists, lawyers and activists were targeted by spyware produced by Israel’s NSO Group that is sold exclusively to governments, according to an internet watchdog group’s investigation published Monday.
Titled “Reckless Exploit,” the report by Citizen Lab at the University of Toronto said the targets included people, such as prominent journalists Carmen Aristegui and Carlos Loret de Mola, who were investigating alleged government corruption and purported human rights abuses by security forces.
The people targeted received messages with links that, if clicked on, opened up their devices to being exploited and spied upon.
NSO’s Pegasus spyware allows hackers access to phone calls, messages, cameras and personal data. The company says it sells the product only to governments for the purposes of fighting crime and terrorism.
Citizen Lab said it had “no conclusive evidence attributing these messages to specific government agencies in Mexico. However, circumstantial evidence suggests that one or more … of NSO’s government customers in Mexico are the likely operators.”
The report noted that the targets involved “domestic issues of immediate concern to powerful Mexican interests” and the government, and that “multiple government agencies in Mexico are reportedly NSO customers.”
Mexico issued a statement saying that just like any other democratic country, it conducts intelligence operations to combat organized crime and defend national security. But it denied any illegal spying.
“The Government of the Republic categorically denies that any of its entities carries out actions of surveillance or intercepting communications from human rights defenders, journalists, anti-corruption activists or any other person without prior judicial authorization.”
Citizen Lab said it documented at least 76 messages containing links to the security exploit. Many were sent in August 2015 or between April and July of the following year.
Other targets included members of the Centro Miguel Agustin Pro Juarez, a prominent human rights group that has investigated cases such as the disappearance of 43 students allegedly by police who turned them over to drug gang killers; the anti-graft group Mexicans Against Corruption and Impunity; and the Mexican Institute for Competitiveness, a civil society group working on economic policy and combatting corruption.
Aristegui, who exposed a case of possible conflict of interest involving a luxury home acquired from a government contractor by President Enrique Pena Nieto’s wife, was aggressively targeted according to Citizen Lab.
She received more than two-dozen messages with NSO links claiming to be from “the U.S. Embassy in Mexico, Amber Alerts, colleagues, people in her personal life, her bank, phone company and notifications of kidnappings,” the report said.
Citizen Lab said some family members of the targets also received spyware messages, including Aristegui’s son who was a minor at the time and got at least 21 of them.
Frank Smyth, executive director of the U.S. group Global Journalist Security, praised Citizen Lab for documenting the surveillance and called it a reminder of the perils that spyware represents in an increasingly wired world.
“This is an escalation of surveillance, but it’s a predictable one considering our technological capabilities and potential,” Smyth said.
Citizen Lab reported in February that the NSO spyware had been used against Mexican activists who campaigned against sugary drinks and junk food.
Subscribe to the Morning Review newsletter
Get the day’s top headlines delivered to your inbox every morning by subscribing to our newsletter