How Israel became a hub for surveillance technology
Alex Kane, Intercept, Oct 17 2016
Mabat 2000, Nov 17 2015
In 1948, the year Israel was founded, the Mer Group was established as a metal workshop. Today it’s a much different company. It operates a dozen subsidiaries and employs 1,200 people in over 40 countries selling wireless infrastructure, software for public transit ticketing systems, wastewater treatment, and more. But at the ISDEF Expo, an event held last June to show off Israeli technology to potential buyers from foreign security forces, the Mer Group’s representatives were only promoting one thing: surveillance products sold by the company’s security division. The Mer Group’s evolution from cutting metal to electronic snooping reflects a larger shift in the Israeli economy. Technology is one of the main sectors in Israeli industry, and Israeli firms with ties to intelligence like the Mer Group, are using their expertise to market themselves internationally. The company’s CEO Nir Lempert is a 22-year veteran of Unit 8200, the Israeli intelligence unit often compared to the NSA, and is chairman of the unit’s alumni association. The Mer Group’s ties to Unit 8200 are hardly unique in Israel, where the cyber sector has become an integral aspect of the Israeli economy, exporting $6b worth of products and services in 2014. When drafted into the army, Israel’s smartest youth are steered toward the intelligence unit and taught how to spy, hack, and create offensive cyber-weapons. Unit 8200 and the NSA reportedly developed the cyber-weapon that attacked Iranian computers running the country’s nuclear program, and Unit 8200 engages in mass surveillance in the OPT, according to veterans.
Increasingly, the skills developed by spying and waging cyberwarfare don’t stay in the military. Unit 8200 is a feeder school to the private surveillance industry in Israel, the self-proclaimed “startup nation,” and the products those intelligence veterans create are sold to governments around the world to spy on people. While the companies that Unit 8200 veterans run say their technologies are essential to keeping people safe, privacy advocates warn their products undermine civil liberties. In August Privacy International released a report on the global surveillance industry that identified 27 Israeli surveillance companies, the highest number per capita of any country in the world. Pindostan leads the world in overall number of surveillance companies, with 122. Unit 8200 veterans either founded or occupy high-level positions in at least eight of the Israeli surveillance companies named by Privacy International, according to publicly available information, and that list doesn’t include companies like Narus, which was founded by Israeli veterans of Unit 8200 but is now owned by Boeing. Privacy International categorized Narus as a Pindosi company, because it’s headquartered in California. Narus technology helped AT&T collect internet traffic and billions of emails and forward that information to the NSA, according to reporting in Wired magazine and documents from the Snowden archive. Edin Omanovic of Privacy International said:
It is alarming that surveillance capabilities developed in some of the world’s most advanced spying agencies are being packaged and exported around the world for profit. The proliferation of such intrusive surveillance capabilities is extremely dangerous and poses a real and fundamental threat to human rights and democratization.
Today Amit Meyer is a journalist, an unusual career path for a veteran of Unit 8200. Many of his colleagues have taken the skills in intelligence collection and hacking they learned in the military and monetized them in the private sector. He told The Intercept:
Unit 8200 is a brand name in Israel, a celebrated institution that allows members easy access to tech companies after their service. Sometimes technology companies approach alumni of the unit; other times, alumni recommend one another. There’s a secret Facebook group for alumni filled with job offers at tech companies. In many cases you just put Unit 8200 in your CV, and magic happens.
Neve Gordon, an Israeli scholar who has studied the country’s homeland security industry, explained:
Israel’s prominence in the surveillance industry stems from the close links between the IOF and the technology sector. In 1960, nine years before the Israeli software industry and university computer science programs even existed, the IOF was developing computer software. Israeli military units that work with computers, including Unit 8200, have become a conveyor belt toward the military and homeland security industries. There are two other reasons why Israel plays such an outsize role in the global surveillance industry. One is that there are hardly any legal limits on veterans taking certain research ideas they worked on in the military and developing them in the private sector. In addition, Israel’s decades-long occupation of the West Bank, Gaza, and East Jayloomia, along with its periodic wars, provides a laboratory for testing and fine-tuning different commodities that are created, or different technologies. Those technologies are then exported around the world.
Mer Security is one of the companies exporting spy products. It is well-known in the country’s security circles. It won an Israeli police contract in 1999 to establish “Mabat 2000,” which set up hundreds of cameras in Jayloomia’s Old City. In an interview with a trade publication, chairman of the company’s board and Unit 8200 vet Haim Mer explained:
The police needed a system which Big Brother could control, which would allow an exhaustive view of events in the Old City area.
At the ISDEF Expo, Eyal Raz, the product director for Mer Security, told The Intercept about what “Israel’s greatest security minds,” as a company brochure puts it, have created. Raz was showcasing Open Source Collection Analysis and Response, known as OSCAR, which trawls through the internet and social media platforms and promises to uncover hidden connections from the data OSCAR collects and monitors. Another product, called Strategic Actionable Intelligence Platform (SAIP) takes that data in and groups it together. To pinpoint actionable intelligence, SAIP uses technology that can highlight words, sentences, and information that might interest intelligence officers. These types of language analysis tools are increasingly popular with intelligence services around the world as a tool for pinpointing the next threat. Raz said:
(This can) understand what it’s reading. For instance, a list of chemicals included in a paragraph may seem innocuous to the layperson, but the language analysis machine can recognize that the person is talking about making an explosive device.
He explained another feature of SAIP:
Users can create an avatar in order to get the credentials to closed forums and to gather information from closed forums. This is also one way you can counterfeit your activities.
Facebook does not allow people to create fake profiles, but the technology Raz and others are selling promises to blend into social networks so that profiles operated by law enforcement look authentic. Multiple news outlets this year have reported that the Israeli Police use similar tactics by creating fake Facebook profiles to befriend targets of investigations and monitor Palestinians. Though Israeli Police spox Micky Rosenfeld was quoted in one report as confirming the police use this tactic, he denied this claim when contacted by The Intercept.
Mer Group’s clients are in Israel and abroad. The company does “joint development” work with Unit 8200, according to Raz, and they recruit veterans from the unit to work for the company. Other clients are scattered around the world, including in Europe, though Raz refused to divulge specifics. But publicly available information shows, for instance, that in 2011 Mer inked a $42m contract with Buenos Aires to set up a “Safe City” system, complete with 1,200 surveillance cameras, including license plate recognition technology. Unit 8200’s ties to the Israeli surveillance industry attracted widespread attention in late August, when digital security researchers at the University of Toronto-based Citizen Lab released a report detailing the provenance of a specific type of malware. They said it was likely that the UAE had targeted Ahmed Mansoor, a prominent human rights activist, with sophisticated spyware that had the ability to turn his iPhone into a mobile surveillance device that could track his movement, record his phone calls, and control his phone camera and microphone. Mansoor says he’s been targeted since 2011, the year he signed a petition demanding democratic reforms in the Emirates. He says:
The state security authorities are basically very obsessed with the monitoring and spying on people, activists. They are totally possessed with this kind of thinking.
Citizen Lab analyzed the spyware after Mansoor received a text message with a link promising “new secrets about torture of Emiratis in state prison.” Rather than clicking, Mansoor sent the texts to the digital security group, which had also, in 2012, analyzed spyware created by Italian surveillance company Hacking Team that had infected Mansoor’s computer. Bill Marczak, a senior research fellow at Citizen Lab who co-authored the report:
We’ve never seen any exploits like this for a mobile device which operates on the very latest version.
The culprit behind the spyware, Citizen Lab’s report concluded, was the NSO Group, a secretive Israeli surveillance company. Details about the NSO Group are hard to come by. Their founders rarely talk to the press. They have no website. Israeli and foreign news media have reported that Omri Lavie and Shalev Hulio, the founders of the company, are veterans of Unit 8200. However, some Israeli outlets have reported that they served in other units. Still, at least three of NSO Group’s current employees served in the intelligence unit, according to their LinkedIn pages. And Unit 8200 veterans provided the company with $1.6m in seed money to develop Pegasus, the name for the spyware, according to Defense News, a trade publication. Zamir Dahbash, the spokesperson for the company, did not answer specific questions about the NSO Group, which was bought in 2014 for $120m by a Pindosi private equity fund. He told The Intercept in a statement:
The company sells only to authorized governmental agencies, and fully complies with strict export control laws and regulations. … The agreements signed with the company’s customers require that the company’s products only be used in a lawful manner.
On its face, an Israeli surveillance company selling spyware to an Arab nation is striking. The UAE and Israel do not have official diplomatic relations, and like in other parts of the Arab world, many Emiratis detest Israel’s decadeslong occupation of Arab lands. But NSO Group’s sale to the UAE is an indication of the growing ties between Israel and the Gulf state, which has a growing appetite for surveillance gear. Gordon, the Israeli scholar, says:
These regimes are unstable in the sense that most of the people living in these regimes do not have basic rights, and they constantly need to monitor and surveil their populations.
In Feb 2015, Middle East Eye writer Rori Donaghy reported that the UAE had signed a contract with Asia Global Technologies, a Swiss-registered company owned by an Israeli and reportedly staffed by former Israeli intelligence agents, to set up a surveillance system featuring thousands of cameras. Donaghy, who is also the founder of the Emirates Centre for Human Rights, said the UAE has quietly bought hundreds of millions of dollars worth of security products from Israel in recent years. The UAE turns to Israel, he said, because it believes Israelis are “simply the best in this market, the most intrusive, the most secretive.”