First Published: 2018-01-18

Lebanese intelligence service may be spying using smartphones worldwide
Lebanon's GDGS has run more than 10 campaigns since at least 2012 aimed mainly at Android phone users in at least 21 countries.
Middle East Online

The attacks, which seized control of Android smartphones, allowed the hackers to turn them into victim-monitoring devices

FRANKFURT - Lebanon's intelligence service may have turned the smartphones of thousands of targeted individuals into cyber-spying machines, in one of the first known examples of large-scale state hacking of phones rather than computers, researchers said on Thursday.

Lebanon's General Directorate of General Security (GDGS) has run more than 10 campaigns since at least 2012 aimed mainly at Android phone users in at least 21 countries, mobile security firm Lookout and digital rights group Electronic Frontier Foundation (EFF) said in a joint report.

The attacks, which seized control of Android smartphones, allowed the hackers to turn them into victim-monitoring devices and to steal any data from them undetected, researchers said. No evidence was found that Apple phone users were targeted, which may simply reflect the popularity of Android in the Middle East.

The state-backed hackers, dubbed "Dark Caracal" by the report's authors - after a wild cat native to the Middle East - used phishing attacks and other tricks to lure victims into downloading fake versions of encrypted messaging apps, giving the attackers full control over the devices of unwitting users.

Michael Flossman, the group's lead security researcher, said that EFF and Lookout took advantage of the Lebanon cyber spying group's failure to secure their own command and control servers, creating an opening to connect them back to the GDGS.

"Looking at the servers, who had registered it when, in conjunction with being able to identify the stolen content of victims: That gave us a pretty good indication of how long they had been operating," Flossman said in a phone interview.

The researchers found technical evidence linking servers used to control the attacks to a GDGS office in Beirut by locating wi-fi networks and internet protocol address in or near the building. They cannot say for sure whether the evidence proves GDGS is responsible or is the work of a rogue employee.

Responding to a question about the claims made in the report, Major General Abbas Ibrahim, director general of GDGS, said he wanted to see the report before commenting on its contents.

He added: "General Security does not have these type of capabilities. We wish we had these capabilities."

Ibrahim was speaking ahead of the report’s publication.

 

Turkey, US agree to ‘work together’ in Syria

Fears of expanding Syrian war could trigger peace deal

Netanyahu warns Iran, brandishes piece of metal

66 feared dead as plane crashes in Iranian mountains

Students in Damascus brave shelling to attend school

Israeli, US officials meet over gas row with Lebanon

Iran's supreme leader says progress needed on justice

Syria Kurds claim striking positions in Turkey

Saudi women to open businesses without male permission

Netanyahu slams 'outrageous' Holocaust remark by Polish PM

Israeli air strikes kill 2 in Gaza

Six suffer breathing difficulties after Turkish shelling in Afrin

Russian mercenaries - a discrete weapon in Syria

Iran protests ban on wrestler who threw bout to avoid Israel

Battle to free Mosul of IS 'intellectual terrorism'

Turkey frees Garman-Turk journalist after one year without charge

Turkey hands life sentences to 3 journalists for Gulen links

Thousands protest corruption in Tel Aviv amid PM indictment call

Prominent jihadist commander killed by rival Syria rebels

300 Russians killed in Syria battle last week

Tillerson, Erdogan have ‘productive, open’ talk

Iran raises rates, freezes accounts in bid to shore up rial

Kremlin says five Russians killed in US Syria strikes

Oman FM in rare visit by Arab official to Jerusalem

Senior IS leader extradited to Iraq from Turkey

Strikes hit another hospital in Syria's Idlib

Churches snub Jerusalem reception over tax dispute with Israeli authorities

Tillerson says US never gave 'heavy arms' to Kurdish YPG

Captured foreign IS suspects claim innocence

Yemeni mother awaits death penalty for spying for UAE

Fuel shortage shuts down Gaza's only power plant

Morocco arrests three suspected IS terrorists

Family of dead environmentalist in Iran threatened

Israel hands life sentence to Palestinian for triple murder

US appeals to Turkey to concentrate on fighting IS

Turkey sets up new 'observation point' in Syria's Idlib

Malaysia rejects criticism over Israeli visit

Tillerson in Ankara to ease Turkey tensions

Egypt arrests ex-presidential candidate

Tillerson: Hezbollah is part of Lebanon's 'political process'

Netanyahu says government ‘stable’ despite police recommending indictment

Corruption accusations facing Netanyahu

Syria denies ‘unacceptable’ chemical weapons use

Nations pledge nearly $25 billion toward Iraq's reconstruction

Egypt remands in custody former anti-corruption chief