The Indian government on Thursday (October 31) asked Facebook-owned WhatsApp for an explanation after the latter confirmed that Indian journalists, and Dalit and human rights activists were targeted for surveillance over a two-week period until May 2019 and were among those globally spied upon by unnamed entities using an Israeli spyware called ‘Pegasus’.
“Government of India is concerned at the breach of privacy of citizens of India on the messaging platform Whatsapp. We have asked Whatsapp to explain the kind of breach and what it is doing to safeguard the privacy of millions of Indian citizens,” Union minister Ravi Shankar Prasad tweeted.
Government of India is concerned at the breach of privacy of citizens of India on the messaging platform Whatsapp. We have asked Whatsapp to explain the kind of breach and what it is doing to safeguard the privacy of millions of Indian citizens. 1/4 pic.twitter.com/YI9Fg1fWro
— Ravi Shankar Prasad (@rsprasad) October 31, 2019
“Govt is committed to protecting privacy of all Indian citizens. Govt agencies have a well established protocol for interception, which includes sanction and supervision from highly ranked officials in central & state governments, for clear stated reasons in national interest (sic),” he said in another tweet.
Meanwhile, WhatsApp also said that it was suing NSO Group, an Israeli surveillance firm, which is reportedly behind the technology that helped unnamed entities, spies, to hack into phones of roughly 1,400 users. These users span across four continents and included diplomats, political dissidents, journalists and senior government officials.
However, it did not say on whose behest the phones of journalists and activists across the world were targeted. Refusing to divulge identities or the exact number of those targeted in India, WhatsApp said it had in May stopped a highly sophisticated cyberattack that exploited its video calling system to send malware to its users.
The mobile messaging giant said it had sent a special WhatsApp message to approximately 1,400 users that it has “reason to believe were impacted by this attack to directly inform them about what happened”.
While the messaging giant didn’t disclose the details or the number of people affected in India, a WhatsApp spokesperson said: “Indian users were among those contacted by us this week”.
WhatsApp has over 1.5 billion users globally, of which India alone accounts for about 400 million.
WhatsApp had on Tuesday filed a lawsuit in a California federal court against Israeli cyber intelligence company NSO Group, which allegedly developed the spyware, saying an attempt was made to infect approximately 1,400 “target devices” globally, including some in India, with malicious software to steal valuable information from those using the messaging app.
NSO has denied the allegations made by WhatsApp. Stating that it will contend the allegations, it said: “the sole purpose of NSO is to provide technology to licenced government intelligence and law enforcement agencies to help them fight terrorism and serious crime”.
WhatsApp said it “believes the attack targeted at least 100 members of civil society… this number may grow higher as more victims come forward”.
WhatsApp Head Will Cathcart said these victims include human rights defenders, journalists and other members of the civil society across the world.
“Tools that enable surveillance into our private lives are being abused, and the proliferation of this technology into the hands of irresponsible companies and governments puts us all at risk,” Cathcart said in an op-ed in The Washington Post.
Cathcart asserted that WhatsApp was committed to the fundamental right to privacy and that it is working to stay ahead of those who seek to violate that right.
A cybersecurity research lab at the University of Toronto, Citizen Lab, had helped WhatsApp investigate the hacking incident.
(With input from agencies.)