The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced the removal of three individuals associated with the Intellexa Consortium, the organization behind the Predator spyware, from its specially designated nationals list. The individuals are:
- Merom Harpaz
- Andrea Nicola Constantino Hermes Gambazzi
- Sara Aleksandra Fayssal Hamou
This decision comes after Hamou was originally sanctioned in March 2024, while Harpaz and Gambazzi faced sanctions in September 2024 for their involvement in the development and distribution of Predator. The reasons behind their removal from the sanctions list remain unclear.
Harpaz is reportedly a manager at Intellexa S.A., while Gambazzi is recognized as the owner of companies Thalestris Limited and Intellexa Limited, which held distribution rights for the spyware. Hamou was described by the Treasury as a key player within the Intellexa consortium, responsible for managerial services, including securing office space for Intellexa S.A. in Greece. It’s uncertain if the individuals continue in these roles.
The Treasury highlighted that commercial spyware poses an increasing security threat to the U.S. and its citizens, emphasizing the need for strict measures to balance the development and use of such technologies with human rights.
Concerns have been raised by Natalia Krapiva, a senior legal counsel at Access Now, regarding the potential implications of lifting sanctions on individuals involved in targeting U.S. entities. She cautioned that such actions could embolden bad actors by suggesting that they might evade consequences through sufficient financial means.
The announcement follows a recent Amnesty International report revealing an attempted attack on a human rights lawyer in Pakistan’s Balochistan province via a WhatsApp message using the Predator spyware. Known for its stealthy operation, Predator has been used since at least 2019 to extract sensitive data from infected devices, typically through one-click or zero-click attack methods.
Similar to the notorious NSO Group’s Pegasus, Predator is marketed for use in counterterrorism and law enforcement. However, investigations indicate a troubling pattern of its application against civil society members, including journalists and politicians. A report by Recorded Future noted ongoing abuse of the Predator spyware amidst growing scrutiny and international cooperation to curb its use.
The spyware landscape is witnessing significant turmoil as companies become infused with geopolitical divides, with sanctioned entities seeking legitimacy through various means while shifting towards regions with lesser oversight. As competition rises, the risks of corruption, insider leaks, and attacks on the spyware vendors have been compounded.
Welcome to DediRock, your trusted partner in high-performance hosting solutions. At DediRock, we specialize in providing dedicated servers, VPS hosting, and cloud services tailored to meet the unique needs of businesses and individuals alike. Our mission is to deliver reliable, scalable, and secure hosting solutions that empower our clients to achieve their digital goals. With a commitment to exceptional customer support, cutting-edge technology, and robust infrastructure, DediRock stands out as a leader in the hosting industry. Join us and experience the difference that dedicated service and unwavering reliability can make for your online presence. Launch our website.