Facebook exposes mercenary spy firms that targeted 50,000 people

Facebook owner Meta Platforms Inc is calling out half a dozen private surveillance companies for hacking or other abuses, accusing them in a report published Thursday of collectively targeting about 50,000 people across its platforms.

The company’s fight with the spy firms comes amid a wider move by American tech companies, U.S. lawmakers and President Joe Biden’s administration against purveyors of digital espionage services, notably the Israeli spyware company NSO Group, which was blacklisted earlier this month following weeks of revelations about how its technology was being deployed against civil society.

Meta is already suing NSO in a U.S. court. Nathaniel Gleicher, Meta’s head of security policy, told Reuters that Thursday’s crackdown was meant to signal that “the surveillance-for-hire industry is much broader than one company.”

Meta’s report said it was suspending roughly 1,500, mostly fake accounts run by seven organizations across Facebook, Instagram and WhatsApp. Meta said the entities targeted people in more than 100 countries.

Meta did not provide a detailed explanation of how it identified the surveillance firms, but it operates some of the world’s biggest social and communications networks and regularly touts its ability to find and remove malicious actors from its platforms.

Among them is Israel’s Black Cube, which became notorious for deploying its spies on behalf of Hollywood rapist Harvey Weinstein. Meta said the intelligence firm was deploying phantom personas to chat its targets up online and gather their emails, “likely for later phishing attacks.”

In a statement, Black Cube said it “does not undertake any phishing or hacking” and said the firm routinely ensured “all our agents’ activities are fully compliant with local laws.”

Others called out by Meta include BellTroX, an Indian cyber mercenary firm exposed by Reuters and the internet watchdog Citizen Lab last year, an Israeli company called Bluehawk CI, and a European firm named Cytrox – all of whom Meta accused of hacking.

Cognyte, which was spun off from security giant Verint Systems Inc in February, and Israeli firms Cobwebs Technologies were accused not of hacking but of using fake profiles to trick people into revealing private data.

Cognyte, Verint and Bluehawk did not immediately return messages seeking comment.

In an email, Cobwebs spokesperson Meital Levi Tal said the company drew on open sources and that its products “are not intrusive by any means.” Messages left with Ivo Malinovski – who until recently identified himself as Cytrox’s chief executive on LinkedIn – received no immediate response. BellTroX founder Sumit Gupta has not returned Reuters reporters’ messages since his firm was exposed last year. He had previously denied wrongdoing.

Gleicher refused to identify any of the targets by name but Citizen Lab, in a report published at the same time as Meta’s, said that one of Cytrox’s victims was Egyptian opposition figure Ayman Nour.

Nour blamed the Egyptian government for the spying, telling Reuters in an interview from Istanbul that he had long suspected he was under surveillance by officials there.

“For the first time I have evidence,” he said.

Egyptian authorities did not immediately respond to a request for comment.

Gleicher said other targets of the spy firms included celebrities, politicians, journalists, lawyers, executives and regular citizens. Friends and family of the targets were also swept up in the espionage campaigns, he said.

Meta cybersecurity official David Agranovich said he hoped Thursday’s announcement would “kickstart the disruption of the surveillance-for-hire market.” There were some signs that other social media firms were taking similar action, with Twitter announcing the removal of 300 accounts a few hours after Meta’s announcement.

Whether the takedowns deal the companies involved more than a temporary setback remains to be seen. Two of the companies, Black Cube and BellTroX, have bounced back after being embroiled in previous spy scandals.

Gleicher said that targets of the spy firms would receive automated warnings, but he said Facebook would stop short of identifying the specific firms involved or their clients. That’s despite the fact that Facebook said it had identified several customers of Cobwebs, Cognyte, Cytrox, and Black Cube – the latter of which includes law firms.

Marta Pardavi, one of several Hungarian human rights defenders who say they were targeted by Black Cube in 2017 and 2018, said she was gratified by the news of Facebook’s report but wanted more information.

“They name law firms,” she said. “But law firms have clients. Who are the clients for these law firms?”

New Technology is One Step Closer to Targeted Gene Therapy

Gene therapy is a powerful developing technology that has the potential to address myriad diseases. For example, Huntington’s disease, a neurodegenerative disorder, is caused by a mutation in a single gene, and if researchers could go into specific cells and correct that defect, theoretically those cells could regain normal function.

A major challenge, however, has been creating the right “delivery vehicles” that can carry genes and molecules into the cells that need treatment, while avoiding the cells that do not.

Now, a team led by Caltech researchers has developed a gene-delivery system that can specifically target brain cells while avoiding the liver. This is important because a gene therapy intended to treat a disorder in the brain, for example, could also have the side effect of creating a toxic immune response in the liver, hence the desire to find delivery vehicles that only go to their intended target. The findings were shown in both mouse and marmoset models, an important step towards translating the technology into humans.

A paper describing the new findings appears in the journal Nature Neuroscience on December 9. The research was led by Viviana Gradinaru (BS ’05), professor of neuroscience and biological engineering, and director of the Center for Molecular and Cellular Neuroscience.

The key to this technology is the use of adeno-associated viruses, or AAVs, which have long been considered promising candidates for use as delivery vehicles. Over millions of years of evolution, viruses have evolved efficient ways to gain access into human cells, and for decades researchers have been developing methods to harness viruses’ Trojan-Horse-like abilities for human benefit.

AAVs are made up of two major components: an outer shell, called a capsid, that is built from proteins; and the genetic material encased inside the capsid. To use recombinant AAVs for gene therapy, researchers remove the virus’s genetic material from the capsid and replace it with the desired cargo, such as a particular gene or coding information for small therapeutic molecules.

“Recombinant AAVs are stripped of the ability to replicate, which leaves a powerful tool that is biologically designed to gain entrance into cells,” says graduate student David Goertsen, a co-first author on the paper. “We can harness that natural biology to derive specialized tools for neuroscience research and gene therapy.”

The shape and composition of the capsid is a critical part of how the AAV enters into a cell. Researchers in the Gradinaru lab have been working for almost a decade on engineering AAV capsids that cross the blood-brain barrier (BBB) and to develop methods to select for and against certain traits, resulting in viral vectors more specific to certain cell types within the brain.

In the new study, the team developed BBB-crossing capsids, with one in particular —AAV.CAP-B10—that is efficient at getting into brain cells, specifically neurons, while avoiding many systemic targets, including liver cells. Importantly, both neuronal specificity and decreased liver targeting was shown to occur not just in mice, a common research animal, but also in laboratory marmosets.

“With these new capsids, the research community can now test multiple gene therapy strategies in rodents and marmosets and build up evidence necessary to take such strategies to the clinic,” says Gradinaru. “The neuronal tropism and decreased liver targeting we were able to engineer AAV capsids for are important features that could lead to safer and more effective treatment options for brain disorders.”

The development of an AAV capsid variant that works well in non-human primates is a major step towards the translation of the technology for use in humans, as previous variants of AAV capsids have been unsuccessful in non-human primates. The Gradinaru lab’s systematic in vivo approach, which uses a process called directed evolution to modify AAV capsids at multiple sites has been successful in producing variants that can cross the BBBs of different strains of mice and, as shown in this study, in marmosets.

“Results from this research show that introducing diversity at multiple locations on the AAV capsid surface can increase transgene expression efficiency and neuronal specificity,” says Gradinaru. “The power of AAV engineering to confer novel tropisms and tissue specificity, as we show for the brain versus the liver, has broadened potential research and pre-clinical applications that could enable new therapeutic approaches for diseases of the brain.”

The paper is titled “AAV capsid variants with brain-wide transgene expression and decreased liver targeting after intravenous delivery in mouse and marmoset.” Goertsen; Nicholas Flytzanis (PhD ’18), the former scientific director of the CLARITY, Optogenetics and Vector Engineering Research (CLOVER) Center of Caltech’s Beckman Institute; and former Caltech postdoctoral scholar Nick Goeden are co-first authors. Additional coauthors are graduate student Miguel Chuapoco, and collaborators Alexander Cummins, Yijing Chen, Yingying Fan, Qiangge Zhang, Jitendra Sharma, Yangyang Duan, Liping Wang, Guoping Feng, Yu Chen, Nancy Ip, and James Pickel.

Funding was provided by the Defense Advanced Research Projects Agency, the National Institutes of Health, and the National Sciences and Engineering Research Council of Canada.

Flytzanis, Goeden, and Gradinaru are co-founders of Capsida Biotherapeutics, a Caltech-led startup company formed to develop AAV research into therapeutics.