19 Aug 2021; MEMO: Dozens of women across the Middle East and North Africa who were likely targeted for surveillance by governments using Pegasus spyware are now at a heightened risk of being blackmailed or harassed, tech experts and victims said, Reuters report.
Developed by Israeli tech firm NSO, Pegasus turns a mobile phone into a surveillance device – using its microphone and cameras and accessing and exporting messages, photos and emails without the user's knowledge.
Deploying the software in countries with few privacy protections, restricted freedom of expression, and broadly conservative societies can pose a particular risk to women, rights activists warned.
"A woman being targeted for surveillance is different from a man being targeted because any information can always be used to blackmail or discredit her," said Anushka Jain at the Internet Freedom Foundation in Delhi, which is providing legal assistance to two activists – including a woman – who were targeted.
"Women already face harassment online. If they think they can be surveilled, they may self-censor even more and will simply be afraid to speak up," said Jain, an associate counsel.
A leaked database of 50,000 phone numbers that were possibly compromised between 2017-2019 included dozens of numbers of women; among them journalists, activists and homemakers.
"It's a massive invasion of her privacy," Jain told the Thomson Reuters Foundation.
In an emailed statement, an NSO spokesperson said that it undertakes "vigorous pre-sale human rights and legal compliance checks to minimize the potential for misuse" and has cut access to clients who have been found to be abusing the technology.
Some women were suspected to have been targeted not because of their activities, but because they were linked to other potential targets.
Alia Ibrahim, co-founder of Daraj, the regional media outlet that partnered with Amnesty on the Pegasus Project, estimated that a third of the potential targets in the region were women – including rights defenders and journalists, but also women linked to powerful men or men who were themselves targeted.
"That's the justification – that they're a mother, wife, daughter," Ibrahim said.
The most high-profile targets were arguably Princess Latifa, daughter of UAE Prime Minister Sheikh Mohammad Bin Rashid Al-Maktoum, and Princess Haya Bint Al-Hussein, her stepmother and the prime minister's former wife.
The possibility that their phones – and those of two female friends of Latifa's – were surveilled has been linked to the foiling of the younger princess' attempt to escape the UAE in 2018.
Hatice Cengiz, the fiancée of murdered Saudi journalist and dissident Jamal Khashoggi, and his wife Hanan Al-Atar were also identified as possible targets.
Among the nearly 10,000 leaked phone numbers tied to Morocco, were Salma Bennani – the wife of the king, himself identified as a potential target – and Claude Mangin, the French wife of Sahrawi activist Naama Asfari, who has been imprisoned in Morocco since 2010.
That had created a broader malaise among women in the region who never considered they could be the target of such sweeping surveillance, said Ibrahim.
"You become paranoid or scared that you're constantly being watched because of the people that you know," she added.
Even if researchers could confirm a device was compromised, they could not identify what material may have been collected – raising concerns that private conversations or revealing photographs may have been swept up.
Mobile phones contain information that is "deeply personal and intimate," so a hack has greater impacts for women, said Vrinda Bhandari, a lawyer who works on digital rights and privacy issues in India.
"When their phone is hacked, women experience this not just as a privacy violation, but also as a violation of their bodily integrity – akin to bodily violence," she said.
Such pressures are familiar to Moroccan journalist Hajar Raissouni, who was sentenced in 2019 to a year in prison on charges of having premarital sex and an abortion, which is illegal in Morocco unless the pregnancy threatens the mother's life.
Raissouni told the Thomson Reuters Foundation her number and that of her husband had been listed as possible Pegasus targets.
"Your whole phone is at the programme's mercy – so my whole life was open to these people," she said.
That had made her much more paranoid – constantly deleting pictures of herself from her phone, using codes to communicate with loved ones, and leaving her devices in a separate room during private conservations, she said.
"Our chats with our relatives our friends, photos of our bodies – if they leak that, given how fast this material spreads on the internet – they can use that against us."