Yazılar

US Judge Finds Israel’s NSO Group Liable for Hacking in WhatsApp Lawsuit

A U.S. judge has ruled in favor of Meta Platforms’ WhatsApp in a lawsuit against Israel’s NSO Group, finding the company liable for exploiting a vulnerability in WhatsApp’s messaging app to install spyware, enabling unauthorized surveillance. U.S. District Judge Phyllis Hamilton of Oakland, California, granted WhatsApp’s motion and found NSO liable for hacking and breach of contract. The case will now proceed to trial, but only to determine the amount of damages.

WhatsApp’s head, Will Cathcart, hailed the ruling as a victory for privacy, stating that spyware companies could no longer hide behind immunity or avoid accountability for unlawful actions. A spokesperson for WhatsApp expressed their gratitude for the decision, reaffirming the company’s commitment to protecting users’ private communications.

Cybersecurity experts, including John Scott-Railton from Citizen Lab, welcomed the ruling as a landmark decision with significant consequences for the spyware industry. He noted that the ruling clarifies that NSO Group is responsible for violating numerous laws, as the company could no longer evade accountability for its actions.

WhatsApp sued NSO in 2019, accusing it of using a vulnerability to access WhatsApp’s servers and install Pegasus spyware on users’ devices. The lawsuit claimed the intrusion enabled the surveillance of 1,400 individuals, including journalists, human rights activists, and dissidents. NSO had defended itself by arguing that its technology was intended to help law enforcement and intelligence agencies combat crime and terrorism.

Despite this defense, NSO failed in its attempt to secure “conduct-based immunity,” which protects foreign officials acting in their official capacity. The 9th U.S. Circuit Court of Appeals upheld the decision in 2021, and the U.S. Supreme Court declined to hear NSO’s appeal, allowing the lawsuit to move forward.

China’s Dahua Technology to Exit Projects in Xinjiang

Zhejiang Dahua Technology (002236.SZ), a major Chinese video surveillance equipment maker, announced on Monday that it and its subsidiaries will terminate or exit five projects in China’s Xinjiang region. The projects, which were awarded between 2016 and 2017, include both terminated contracts and those still in operation, according to a filing with the Shenzhen stock exchange. Dahua confirmed it would cease operating the projects and initiate asset disposal and debt resolution procedures, but did not provide a specific reason for the withdrawal.

This move follows a similar decision by Hikvision (002415.SZ), another Chinese surveillance camera manufacturer, which also exited contracts with five Xinjiang local governments earlier this month, without disclosing the reasons.

Dahua’s exit comes amid heightened international scrutiny. The U.S. government added Dahua to its trade blacklist in 2019, accusing the company of involvement in “repression and high-tech surveillance” against Uyghur Muslims and other minority groups in Xinjiang. Dahua has consistently denied these allegations, arguing that the U.S. decision was not based on factual evidence. The Chinese government has also rejected claims of human rights abuses in the region and criticized companies that sever ties with firms operating there.

 

Congo Files Criminal Complaints Against Apple Over Use of Conflict Minerals

The Democratic Republic of Congo (DRC) has filed criminal complaints against Apple subsidiaries in France and Belgium, accusing the tech giant of using conflict minerals in its supply chain. The legal actions, initiated by Congo’s government, allege that Apple’s operations indirectly support armed groups involved in severe human rights abuses, including massacres and rapes, in the country’s mining regions. Congo, a major source of tin, tantalum, and tungsten—referred to as 3T minerals—has long struggled with violent conflicts fueled by the competition for its mineral resources.

Legal Allegations and Apple’s Response

The complaints, filed on Monday to the Paris prosecutor’s office and the Belgian investigating magistrate’s office, accuse Apple France, Apple Retail France, and Apple Retail Belgium of various offences. These include covering up war crimes, laundering tainted minerals, handling stolen goods, and deceptive commercial practices aimed at assuring consumers that its supply chains are free of conflict-tainted minerals.

Apple has denied the allegations, emphasizing that it does not directly source primary minerals. The company claims it audits its suppliers, publishes findings, and funds initiatives to improve mineral traceability. In its 2023 filing to the U.S. Securities and Exchange Commission, Apple stated that none of the smelters or refiners in its supply chain had financed armed groups. However, Congo’s lawyers argue that Apple’s reliance on minerals that have been illegally extracted and funneled through international supply chains makes the company complicit in the ongoing abuses.

The Role of Conflict Minerals in DRC

The Eastern DRC has been the epicenter of brutal conflicts since the 1990s, driven largely by competition for valuable minerals. Armed groups use the proceeds from mineral exports to fund their activities, which often involve violence and smuggling, particularly through neighboring Rwanda. Congo’s legal team highlights that despite Apple’s participation in industry efforts to ensure traceability, some of its suppliers still source from regions controlled by armed groups. Congo’s complaints also mention ITSCI, a certification scheme designed to monitor and certify mineral supply chains, which Congo believes has been discredited due to its failure to properly track minerals from conflict zones.

Judicial Pursuit and International Attention

The complaints against Apple are the first criminal legal actions filed by the Congolese state against a major tech company over the issue of conflict minerals. The filings have drawn significant attention, especially given Belgium’s historical connection to Congo during the colonial era, which adds a moral dimension to the case. Christophe Marchand, a Belgian lawyer representing Congo, emphasized Belgium’s responsibility in helping address the ongoing pillaging of Congo’s resources, a practice dating back to King Leopold II’s colonial rule.

Apple’s use of the ITSCI certification scheme has also come under scrutiny. The Responsible Minerals Initiative (RMI) suspended ITSCI in 2022, citing concerns over its inability to provide accurate reports on high-risk mining sites amid escalating violence in Congo’s North Kivu province. While Apple has continued to reference ITSCI in its filings, it did not address the suspension or the criticisms surrounding it.

Broader Industry Context

The complaints also align with broader international concerns about the use of minerals from conflict zones in consumer electronics. In March, a U.S. federal court dismissed a lawsuit by private plaintiffs that sought to hold companies like Apple, Google, and Microsoft accountable for their reliance on child labor in cobalt mines in Congo. The ongoing legal challenges underscore the growing pressure on tech giants to ensure that their supply chains do not contribute to human rights violations or fuel conflict.

Future Developments

The outcome of these criminal complaints will depend on whether the French and Belgian judicial authorities decide to investigate the allegations and bring charges. The complaints represent an important step in Congo’s ongoing efforts to address the exploitation of its resources and the international companies that benefit from them.