Hacking Team Spyware ‘Hits Ethiopian Journalists’

Hacking Team spyware, which is sold to governments across the world, has allegedly been found targeting journalists in Ethiopia, leading to concern amongst civil rights bodies.

The Italian firm’s  Remote Control System (RCS) was seen hitting various systems run by the Ethiopian Satellite Television Service (ESAT), according to a report from Citizen Lab, an activist-focused malware research group based at the University of Toronto.

The first attempt tried to snoop on ESAT’s Skype account, run by a contributor based out of Belgium. Analysis of a file sent to the journalist over Skype indicated it was part of an attack using Hacking Team kit.

Hacking Team attacks

The file communicated with a server that returned two SSL certificates, one of which was was issued by “RCS Certification Authority” and “HT srl”. That certificate was also similar to SSL certificates returned by two other servers apparently owned by Hacking Team.

It also matched up with previous samples uncovered by Citizen Lab.

A second attempt on the same journalist, involved a mailcious Word file sent by a contact going by the name Yalfalkenu , involved a malicious Word file.

The same attacker appeared to try breaching ESAT through another journalist, based in the organisation’s Northern Virginia offices.

“We talked to employees of ESAT, who said that Yalfalkenu used to collaborate with them, but then he ‘disappeared for a while’,” Citizen Lab wrote in its report. “It is possible that someone else is now using Yalfalkenu’s account.

“While Hacking Team and other ‘lawful intercept’ spyware vendors purport to practice effective self-regulation, this case seems to be part of a broader pattern of government abuse of such spyware.

“‘Lawful intercept’ spyware has also apparently been abused to target Bahraini activists, Moroccan journalists, critics of the Turkish Government, and Emirati human rights activists.”

Hacking Team had not responded to a TechWeekEurope request for comment at the time of publication. It has previously claimed to carry out a thorough assessment of clients to ensure they aren’t contravening human rights.

Hacking Team software is not dissimilar to that offered by British firm Gamma International, which has also come under fire after its services were allegedly in use in nations with poor human rights records, including Bahrain.

Like Internet anonymity? Try our Anonymous quiz!

Thomas Brewster

Tom Brewster is TechWeek Europe's Security Correspondent. He has also been named BT Information Security Journalist of the Year in 2012 and 2013.

View Comments

  • Atrocious human right abuse on citizens, political oppositions and journalist critical of the so called mafia Ethiopian government is day to day life for the last twenty plus years. What I don’t get is why this mafia government still ally to west with its terrible human right abuse record.

Recent Posts

UK’s CMA Readies Cloud Sector “Behavioural” Remedies – Report

Targetting AWS, Microsoft? British competition regulator soon to announce “behavioural” remedies for cloud sector

12 hours ago

Former Policy Boss At X Nick Pickles, Joins Sam Altman Venture

Move to Elon Musk rival. Former senior executive at X joins Sam Altman's venture formerly…

15 hours ago

Bitcoin Rises Above $96,000 Amid Trump Optimism

Bitcoin price rises towards $100,000, amid investor optimism of friendlier US regulatory landscape under Donald…

16 hours ago

FTX Co-Founder Gary Wang Spared Prison

Judge Kaplan praises former FTX CTO Gary Wang for his co-operation against Sam Bankman-Fried during…

17 hours ago