In a significant move, the U.S. Treasury Department has sanctioned the Intellexa Consortium and its affiliates over their development of commercial spyware.
At a Glance
- The U.S. Treasury’s OFAC sanctioned five individuals and one entity associated with Intellexa Consortium.
- Sanctions target spyware technology threatening U.S. national security.
- Intellexa markets spyware under the brand name “Predator.”
- Sanctions block property and prohibit transactions with designated entities.
- The Predator spyware has been used by multiple foreign governments.
Sanctioned Individuals and Entities
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned five individuals and one entity connected to the Intellexa Consortium. These include executives such as Felix Bitzios, Andrea Nicola Constantino Hermes Gambazzi, Merom Harpaz, Panagiota Karaoli, and Artemis Artemiou. Additionally, the Aliada Group Inc., a British Virgin Islands-based company, is sanctioned for facilitating financial transactions within the network.
OFAC’s move to sanction these individuals and entities blocks all property and interests in property of the designated persons in the U.S. It also prohibits U.S. persons from transactions involving these entities. Non-U.S. individuals and entities are also prohibited from causing U.S. persons to violate these sanctions. Financial institutions and others engaging with sanctioned entities may face sanctions or enforcement actions.
Today, @USTreasury’s Office of Foreign Assets Control sanctioned 5 individuals and 1 entity associated with the Intellexa Consortium, a complex web of companies that built and commercialized a suite of invasive spyware products. https://t.co/GhWpvSseBo
— Treasury Department (@USTreasury) September 16, 2024
Intellexa Consortium and Predator Spyware
The Intellexa Consortium, led by Tal Jonathan Dilian, develops and markets spyware under the brand name “Predator.” Predator spyware has sophisticated capabilities, including accessing data on target devices through one-click and zero-click attacks, severely compromising sensitive information. The consortium’s clients include state-sponsored actors and governments around the globe. This includes the documented use of Predator against government officials, journalists, and opposition politicians.
“The United States will not tolerate the reckless propagation of disruptive technologies that threaten our national security and undermine the privacy and civil liberties of our citizens,” said Acting Under Secretary of the Treasury for Terrorism and Financial Intelligence, Bradley T. Smith.
Predator spyware has been found in use in numerous countries including Angola, Armenia, Botswana, Egypt, Indonesia, Kazakhstan, Mongolia, Oman, the Philippines, Saudi Arabia, and Trinidad and Tobago. Despite the sanctions, Predator secured new customers in places like the Democratic Republic of Congo, Angola, UAE, and Madagascar.
Today’s announcement reflects our whole-of-government effort to counter the proliferation and misuse of commercial spyware. We will continue to pursue accountability for those that target U.S. Government officials, political dissidents, journalists, and other populations. https://t.co/gTlUNuRQH5
— Sean Savett (@NSC_Spox) September 16, 2024
Impact and Response
The U.S. Treasury underscores that these sanctions aim not just to prohibit certain activities but to bring about positive behavioral changes. This move signifies a commitment to curbing the misuse of commercial surveillance tools, which pose significant security risks. The United States emphasizes the need for responsible technology development aligned with international standards.
“Today’s actions represent a tangible step forward in discouraging the misuse of commercial surveillance tools, which increasingly present a security risk to the United States and our citizens,” said Under Secretary of the Treasury for Terrorism and Financial Intelligence, Brian E. Nelson. “The United States remains focused on establishing clear guardrails for the responsible development and use of these technologies while also ensuring the protection of human rights and civil liberties of individuals around the world.”
Despite these sanctions, the resilient spyware ecosystem continues evolving. Companies frequently change identities to evade restrictions. However, U.S. efforts continue to disrupt this illicit economy, evident through the meticulous tracking of commercial spyware incidents targeting over 50 U.S. government workers across more than 10 countries.
The Biden administration remains proactive, exemplified by a high-level meeting to discuss commercial spyware during the upcoming UN General Assembly session. Additionally, President Biden’s 2023 executive order prohibited U.S. agencies from purchasing spyware used by foreign governments against dissidents.
Intellexa Consortium, founded by previously sanctioned Tal Jonathan Dilian, is a complex international network of companies that developed and sold the ‘Predator’ spyware that exploited software bugs in iOS and Android platforms@securityweek story on fresh US Treasury sanctions…
— Ryan Naraine (@ryanaraine) September 16, 2024
Sources:
- Treasury Sanctions Enablers of the Intellexa Commercial Spyware Consortium
- U.S. Treasury Sanctions Executives Linked to Intellexa Predator Spyware Operation
- US hits Intellexa spyware maker with more sanctions
- Treasury Sanctions Members of the Intellexa Commercial Spyware Consortium
- US Expands Sanctions Against Intellexa Spyware Consortium
- More US Sanctions Against Predator Spyware Maker Intellexa
- Treasury hits Predator spyware makers with more sanctions
- US Government Expands Sanctions Against Spyware Maker Intellexa
- US imposes sanctions on a spyware firm behind a tool used to spy on dissidents and journalists
