Spyware maker Intellexa accused of remote access to customer surveillance systems

Spyware maker Intellexa allegedly provided its government clients with surveillance systems that allowed company staffers direct remote access to personal data of hacked individuals. This capability was revealed through leaked internal documents and training materials published by Amnesty International and a coalition of media partners, according to TechCrunch.

Evidence suggests Intellexa employees could remotely access customer surveillance systems using TeamViewer, an off-the-shelf remote access tool. A leaked training video reportedly shows privileged access to the Predator spyware system, including its dashboard and the storage of surveillance data gathered from victims. The video allegedly depicted live infection attempts against targets, including specific details like infection URLs and IP addresses. This contradicts the common industry practice where spyware vendors claim no access to customer data or systems to avoid legal liability and maintain client confidentiality. Industry experts expressed skepticism, noting that government agencies would typically not permit such direct access, suggesting the video might depict a demo environment rather than live systems.

These revelations raise significant security and privacy concerns, indicating that sensitive data was not only exposed to government clients but also risked exposure to the spyware company itself. The allegations add to existing scrutiny of the spyware industry. The U.S. government has previously sanctioned Intellexa's founder, Tal Dilian, over allegations of spyware use against Americans, highlighting the growing geopolitical and security implications of these sophisticated surveillance tools.

Source: TechCrunch