Revealed: Memento Labs CEO Admits Government Client Misused Spyware – What It Means for Privacy

Researchers at Kaspersky recently unveiled a new spyware called Dante, reportedly used to target Windows users in Russia and Belarus. This software is linked to Memento Labs, a surveillance tech firm based in Milan, which was founded in 2019 after acquiring Hacking Team, a company infamous for its spyware practices.

Memento’s CEO, Paolo Lezzi, confirmed that Dante is indeed a product of their lab. He expressed concerns about one of their government clients using an outdated version of the spyware, which will soon lose official support. Lezzi described the situation as a customer’s misstep, stating, “Clearly they used an agent that was already dead.”

Memento has requested that all clients discontinue using this outdated spyware and warned them of its detection since December of last year. Lezzi also mentioned that Memento has shifted focus to mobile spyware, while they still develop zero-days—security flaws unknown to software vendors that can be exploited for surveilling.

Kaspersky, in its report, highlighted that the group behind Dante is skilled in Russian and familiar with local nuances, indicative of government ties. They identified the group as “ForumTroll,” which is allegedly targeting attendees of a notable Russian political and economics forum called Primakov Readings. The group has targeted various sectors, including media and education.

Interestingly, the detection of Dante coincided with a “wave” of phishing attacks exploiting a zero-day vulnerability in the Chrome browser, although Lezzi stated Memento wasn’t behind this zero-day exploit.

Kaspersky pointed out that Memento has improved the technology inherited from Hacking Team, ultimately developing Dante. Notably, evidence connecting the spyware to Memento includes a marker in its code, “DANTEMARKER,” which was discussed publicly at a conference prior.

The history of Hacking Team is quite enlightening. After it was hacked in 2015, sensitive internal information was leaked, revealing unethical practices, such as selling spyware to regimes known for human rights abuses. Following the acquisition, Lezzi aimed to rebrand and reform the company, yet its legacy looms large.

John Scott-Railton, a researcher at the University of Toronto’s Citizen Lab, commented on this cycle of abuse in the spyware industry. He stated, “It tells us that we need to keep up the fear of consequences,” noting how the specter of past controversies can linger even after a company’s apparent demise.

This developing situation sheds light on the ongoing challenges in the realm of cybersecurity and the persistent evolution of spyware technology, reminding us that vigilance remains crucial in a world increasingly influenced by digital espionage.

For more detailed insights into cybersecurity developments, you can visit sources like Kaspersky’s Securelist or Citizen Lab.

Source link

belarus,cybersecurity,Exclusive,hacking team,Kaspersky,Memento Labs,Paolo Lezzi,privacy,Spyware,surveillance