Google’s TAG highlights spyware industry

Google’s TAG released a report highlighting surveillance software companies enabling the use of dangerous hacking tools. Google researchers, with their extensive visibility into global hacking campaigns, identified numerous smaller firms, besides the well-known NSO, enabling the proliferation of spy technology for malicious purposes.

The Google researchers named companies such as Cy4Gate and RCS Labs in Italy, Intellexa in Greece, Negg Group in Italy, and Variston in Spain, stating their involvement in services to break into phones and bypass security measures by Apple and Google. These companies were found to employ various techniques, including exploiting browser vulnerabilities and iOS apps, to infect devices.

While spyware firms claim their products are for government use in national security, they are often found to be used for hacking civil society, political opposition, and journalists. The report emphasised the strong demand from government customers for such tools and highlighted the significant role of the private sector in developing sophisticated hacking and spyware capabilities.

Google is urging the USA and its allies to take action against the spyware industry. Last year, the US and its allies committed to working on curbing the surveillance software industry after discovering at least 50 US government employees in 10 countries targeted by spyware.

The report comes in the wake of the US announcing visa restrictions on individuals misusing commercial spyware. Google emphasized that limiting spyware vendors’ operations in the US could alter the incentive structure that has fueled their growth.