\n<\/p>\n
Last year, the phone hacking tool maker Cellebrite announced it had suspended Serbian police as customers<\/a>, after human rights researchers alleged local police and intelligence agencies used its tools to hack into the phones of a journalist and an activist<\/a>, and plant spyware.\u00a0<\/p>\n This was a rare example of Cellebrite<\/a> publicly cutting off a customer following documented allegations of abuse, citing Amnesty International\u2019s technical report<\/a> for its decision.\u00a0<\/p>\n But following recent similar accusations of abuse in Jordan and Kenya, the Israeli-headquartered company responded by dismissing the allegations and declining to commit to investigating them. It\u2019s unclear why Cellebrite has changed its approach, which appears contrary to its previous actions.<\/p>\n On Tuesday, researchers at The University of Toronto\u2019s Citizen Lab published a report<\/a> alleging the Kenyan government used Cellebrite\u2019s tools to unlock the phone of Boniface Mwangi, a local activist and politician, while he was in police custody. In another report<\/a> from January, the Citizen Lab accused the Jordanian government of breaking into the phones of several local activists and protesters using Cellebrite\u2019s tools.\u00a0<\/p>\n In both investigations, the Citizen Lab<\/a>, an organization that has investigated abuses of spyware and hacking technologies around the world, based their conclusions on finding traces of a specific application linked to Cellebrite on the victims\u2019 phones.\u00a0<\/p>\n The researchers said that those traces are a \u201chigh confidence\u201d signal that someone used Cellebrite\u2019s unlocking tools on the phones in question, because the same application had been previously found on VirusTotal, a malware repository, and was signed with digital certificates owned by Cellebrite.\u00a0\u00a0<\/p>\n Other researchers have also linked the same application<\/a> to Cellebrite.\u00a0\u00a0<\/p>\n \u201cWe do not respond to speculation and encourage any organization with specific, evidence-based concerns to share them with us directly so we can act on them,\u201d Victor Cooper, a spokesperson for Cellebrite, told TechCrunch in an email.\u00a0<\/p>\n When asked why Cellebrite is acting differently from the Serbia case, Cooper said \u201cthe two situations are incomparable,\u201d and that, \u201chigh confidence is not direct evidence.\u201d<\/p>\n Cooper did not respond to multiple follow-up emails asking if Cellebrite would investigate the Citizen Lab\u2019s latest report, and what, if any, differences there are with its case in Serbia.<\/p>\n \t\t\tDo you have more information about Cellebrite, or other similar companies? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram, Keybase and Wire @lorenzofb, or by email<\/a>.<\/a> \t\t<\/div>\n In both its Kenya and Jordan investigations, the Citizen Lab reached out to Cellebrite in advance of publishing the reports to provide the company with a right to respond.\u00a0<\/p>\n In response to the Jordan report, Cellebrite said that<\/a> \u201cany substantiated use of our tools in violation of human rights or local law will result in immediate disablement,\u201d but did not commit to investigating the case and declined to disclose specific information about customers.\u00a0<\/p>\n For the Kenya report, however, Cellebrite acknowledged receipt of Citizen Lab\u2019s inquiry but did not comment, according to John Scott-Railton, one of the Citizen Lab researchers who worked on the Cellebrite investigations.\u00a0<\/p>\n \u201cWe urge Cellebrite to release the specific criteria they used to approve sales to Kenyan authorities, and disclose how many licenses have been revoked in the past,\u201d Scott-Railton told TechCrunch. \u201cIf Cellebrite is serious about their rigorous vetting, they should have no problem making it public.\u201d<\/p>\n Following previous reports of abuse, Cellebrite, which claims<\/a> to have more than 7,000 law enforcement customers around the world, cut off relationships with Bangladesh<\/a> and Myanmar<\/a>, as well as Russia and Belarus<\/a> during 2021. Cellebrite previously said it stopped selling<\/a> to Hong Kong and China following U.S. government regulations restricting the export of sensitive technologies to the country. Local activists in Hong Kong had accused<\/a> the authorities of using Cellebrite to unlock protesters\u2019 phones.<\/p>\n<\/div>\nContact Us<\/h4>\n