Nigeria’s intelligence agency using Israeli spyware to monitor citizens
Nigeria’s Defense Intelligence Agency has acquired Israeli spyware to monitor phone calls and text messages of dissidents and other citizens, a new report has revealed.
According to the report by the University of Toronto’s Citizen Lab, which researches digital surveillance, security, privacy and accountability, Israeli spyware provider Circles has been helping state security apparatuses across 25 countries, including Nigeria, to spy on the communications of opposition figures, activists, journalists and other citizens.
The report — titled Running in Circles: Uncovering the Clients of Cyber-espionage Firm Circles — said Circles is a sister company of Tel Aviv-based NSO Group, whose flagship Pegasus spyware has helped government spies break into the smartphone of about 1,400 people across four continents, take control of their phones, its cameras and microphones, and mine the user’s personal data.
The Citizen Lab report also said the technique used by the Circles snooping tech is known as Signaling System 7 (SS7) exploitation and allows one mobile network to connect with another.
“Unlike NSO Group’s Pegasus spyware, the SS7 mechanism by which Circles’ product reportedly operates does not have an obvious signature on a target’s phone,” explained the report.
The report further noted that at least two entities in Nigeria have deployed Circles’ product.
“One system may be operated by the same entity as one of the Nigerian customers of the FinFisher spyware that we detected in December 2014,” it said.
“The other client appears to be the Nigerian Defense Intelligence Agency (DIA), as its firewall IPs are in AS37258, a block of IP addresses registered to “HQ Defense Intelligence Agency Asokoro, Nigeria, Abuja,” the report added.
It cited an earlier investigation by online newspaper Premium Times, which said the governors of two Nigerian states had purchased systems from Circles to spy on dissidents.
“In Delta State, Premium Times reports that the system was installed … and operated by employees of the governor, rather than police,” the report said.