The Escalating Battle Against Digital Espionage: Commerce Department Expands Blacklist

Government Commerce Department Blacklists More Spyware Companies

The U.S. Commerce Department has taken a major step in combatting commercial spyware by adding two companies, Cytrox and Intellexa, to its trade blacklist. These companies have been implicated in operations aimed at spying on journalists, politicians, and even a Meta executive in Greece. The blacklisting comes in response to their trafficking in cyber exploits used to access information systems, which poses a threat to the privacy and security of individuals and organizations worldwide.

Background and Significance

These enforcement actions are the first major initiative against commercial spyware since President Biden issued an executive order in March that restricted the U.S. government’s use of spyware. While the order doesn’t completely ban the use of spyware by the U.S. government, it aims to establish restrictions and criteria for determining the security risks associated with spyware companies.

Intellexa, based in Greece, is known for its Android spyware Predator, which has been described by researchers as one of the most widespread spyware tools after NSO Group’s notorious Pegasus. Cytrox, banned by Meta (formerly Facebook) in the past, has also engaged in surveillance operations on the platform.

The addition of Cytrox and Intellexa to the Commerce Department’s blacklist follows the inclusion of Israeli spyware companies NSO Group and Candiru on the same list in November 2021. These designations offer an opportunity for private investors to evaluate the risks associated with supporting commercial spyware companies whose practices threaten the security and safety of technology users globally.

A Global Effort Against Spyware

The Biden administration, in coalition with 10 other countries, released a statement in March committing to guardrails against the abuse of spyware. This collective initiative reflects an increasing concern about the human rights abuses and political repression facilitated by the use of commercial spyware.

Furthermore, the Biden administration has been vocal about potential American investment in spyware-for-hire firms. The administration has made it clear that even if a Hollywood financier were to take over NSO Group, it would not automatically remove the company from the entity list, and the move may prompt a security review.

Protecting Privacy and Security

The actions taken by the Commerce Department illustrate a growing recognition of the need to address the risks associated with commercial spyware. While spyware can be utilized for legitimate purposes, such as law enforcement investigations, it can also be exploited for malicious ends. The involvement of companies like Cytrox and Intellexa in surveillance operations targeting individuals and organizations highlights the potential for abuse.

The impact of spyware extends beyond national borders, posing threats to individuals and organizations worldwide. By blacklisting such companies, governments and regulatory bodies can send a strong message that the privacy and security of individuals and organizations will not be compromised.

Conclusion

The addition of Cytrox and Intellexa to the U.S. Commerce Department’s trade blacklist marks a significant step in combatting commercial spyware and protecting global privacy and security. It reflects a growing recognition of the risks associated with spyware and the need for stricter regulations and oversight. The Biden administration’s commitment, along with other nations, to establish guardrails against the abuse of spyware further emphasizes the global efforts to tackle this issue.

As technology advances, it is crucial for governments, businesses, and individuals to remain vigilant about the threats posed by spyware. It is advisable for individuals to apply strong security measures, such as regularly updating their devices, using strong and unique passwords, and being cautious of suspicious messages and links. Governments and regulatory bodies should continue to collaborate to establish clear regulations and oversight mechanisms to ensure the responsible use of spyware technology.