Indian supreme court orders inquiry into state’s use of Pegasus spyware : Judges criticise Modi government’s refusal to divulge what software was used for and why

 

Cover photo: A protest in July accusing Modi's government of using military-grade spyware to monitor political opponents, journalists and activists. Photograph: Manish Swarup/AP

 

THE GUARDIAN

 in Delhi and 

In spite of the union government trying its best to skirt the Pegasus spying issue, the Supreme Court of India has taken a no-nonsense stand on the cyber-spying issue and in a way, pulled up the union government for dragging its feet  under the garb of National Security.  In the midst of repeated pandemonium by opposition parties during the Monsoon session in the Indian parliament, the government gave wishy-washy responses and tried its best to sweep the matter under the carpet by promising that it would institute an expert committee to enquire into the matter.  The Supreme Court of India saw through the bluff of the union government and set up its own independent enquiry committee headed by retired Justice R.V. Raveendran.  The three cyber experts are: (1) Dr Navreen Kumar Chaudhary (Professor – Cyber Security & Digital Forensics)  and Dean, National Forensic Sciences University, Gandhinagar Gujarat  (2)  Dr Prabaharan P. (Professor – School of Engineering) Amrita Vishwa Vidyapeetham, Amritapuri, Kerala (3) Dr Ashwin Anil Gumaste, Institute of Technology, Bombay.  The Bench directed the experts to submit their findings expeditiously and scheduled the matter for further hearing after eight weeks.

The million-dollar question that the government did not answer in the parliament and also in its vague 2-page affidavit to the Supreme Court of India was whether it had procured or sanctioned the procurement of Pegasus Spyware from NSO, the Israeli agency which makes and sells the software only to vetted governments and not to individuals or private corporate houses. So the die has been cast and it will be very difficult for the government to wriggle out of the Supreme Court net.  The judges of the Supreme Court, or for that matter, the Supreme Court of India as a whole deserve huge compliments for taking the bull by the horn and arresting the increasing tendency of the government (including the state governments) to pry into the privacy of citizens and reducing democracy into an autocracy.  Isaac Gomes, Associate Editor.    

 

India’s supreme court has ordered an independent inquiry into whether the government used the surveillance software Pegasus to spy illegally on journalists, activists and political opponents.

The decision on Wednesday to create an independent committee to investigate whether and how the Indian state had used the Israeli spyware tool was a significant victory for privacy campaigners after years of stonewalling by Narendra Modi’s government.

 

The order was a response to cases lodged by several Indian journalists and activists, including some revealed by the Guardian and a consortium of reporting partners to have been victims of Pegasus – a cyber-weapon capable of hacking a target’s smartphone, extracting its contents and turning on the device’s microphone and camera.

Pegasus is a cyber-weapon capable of hacking a target’s smartphone, extracting its contents and turning on the device’s microphone and camera.

Analysis by the media outlets of infected phones, and of a wider list of more than 50,000 phone numbers believed to have been selected as persons of interest by clients of Pegasus’ manufacturer, NSO Group, strongly indicated the Indian government was using the tool. Delhi has consistently declined to confirm if it has access to it.

The committee will comprise three cybersecurity experts and its work will be overseen by a retired supreme court judge. It will submit its report in two months.

In a decision that opened with a quote from George Orwell’s Nineteen Eighty-Four, the judges criticised the government’s refusal to divulge, on the grounds of national security, any details of what the software was used for and why. They said Delhi had offered “only a vague … denial of allegations”.

“The state cannot get a free pass every time by raising national security concerns. No omnibus prohibition can be called against judicial review,” the judges said.

Siddharth Varadarajan, the founder-editor of the Indian non-profit website the Wire, which worked with the Guardian on the Pegasus project, welcomed the decision. “It’s a good start. The supreme court has rightly refused to buy the government’s ‘national security’ logic,” he said.

The expert group will have powers to call witnesses and seek documents as part of its fact-finding mission, and can issue adverse findings against individuals or the government if they decline to cooperate. The court listed another hearing date for after the committee’s reporting deadline, indicating it intended to continue pursuing the issue.

The opposition in India has accused the Modi government of treason and “unforgivable sacrilege” over the reports from the Pegasus projectthat revealed several top journalists and an election strategist had been targeted using the software.

The stories disclosed details of hundreds of verified Indian phone numbers that appeared in the leaked records of 50,000 numbers, including that of the opposition leader, Rahul Gandhi.

The Pegasus project, an investigation published earlier this year into the Israeli spyware maker, NSO Group, was led by a consortium of 17 news outlets that included the Guardian, Washington Post and the French nonprofit Forbidden Stories.

NSO has said its hacking software was only meant to be used by government clients to conduct legitimate investigations into serious crime. The company said it conducted thorough investigations of allegations of misuse when it received “credible information”.

The Indian government has for years resisted confirming whether it uses Pegasus, and in the current proceedings provided only a brief affidavit that did “not shed any light on their stand or provide any clarity as to the facts of the matter at hand”, the court said.

At the time of the Pegasus project revelations senior government figures claimed the stories, which covered the possible misuse of spyware in more than 10 countries, were part of an “anti-India” campaign timed to coincide with the opening of the monsoon session of the Indian parliament.

The question of whether the Indian government has access to Pegasus, separate to whether it has used it against journalists and other civil society figures, is highly sensitive because India’s surveillance laws allow eavesdropping but ban “hacking”, even by the state.

Indian lawyers have argued that the Pegasus spyware, which inserts malicious code into a smartphone’s operating system that allows it to take control of the device, is a clear example of hacking and therefore the use of it may be illegal, regardless of who it has been deployed against.

Lawyers and privacy advocates welcomed the decision, which they said had wider implications for the government’s accountability on “security issues”. “We’ve seen traditionally in India that [the government] would just cite national security and the court would adopt a hands-off approach,” said Vrinda Bhandari, a lawyer involved in the Pegasus case.

“It’s one of the first times that the court has taken this strong view that you can’t have a ritualistic incantation of ‘national security’ … The mere fact the government is citing national security is not enough – the court is requiring it to back its case up with some kind of detail.”

During earlier hearings, the government had offered to form its own panel of experts but this was rejected on Wednesday by the judges, who began the hearing by noting the “Orwellian concerns” about the misuse of technology.

The judges said indiscriminate spying could not be allowed and highlighted the “chilling” effect it could have on freedom of speech and freedom of the press. They were compelled, they added, to “determine the truth and get to the bottom of the issue”.

 

You may also like...

1 Response

  1. Isaac Gomes says:

     

    As mentioned in the Telegraph Calcutta (29th October 2021), Mr Naor Gilon, Israel's ambassador to India on Thursday 28th October said his country allowed companies like the NSO Group, which created the Pegasus spyware, to sell their technology ONLY TO GOVERNMENTS but refused to be drawn into  commenting on its alleged use here on the premise that it was India's internal matter.

    The Ambassador was responding to questions related to Pegasus during his first media conference in New Delhi after presenting his credentials to the President on Tuesday.

    Mr Gilon was asked if the Indian government had contacted the Israeli government or the embassy regarding the use of the spyware in India, and whether the mission would work with the Supreme Court-appointed probe committee if its assistance was sought.

    "NSO is a private Israeli company. I was dealing with it in the past," he said.

    He added: "Every export of NSO or such companies needs an export licence of the Israeli government. We grant this export licence only (for) exporting to governments.  They cannot sell to non-governmental organisations. What's happening in India is really the internal thing of India and I would rather not go into your internal affairs." Israel has all along maintained that the Pegasus software is sold only to governments.

    Gilon's remarks came a day after the Supreme Court of India appointed a committee headed by a former Supreme Court judge and including technical experts to examine allegations that the Narendra Modi government had used the Pegasus spyware to snoop on citizens.

    Israel too is probing allegations against the NSO Group's controversial Pegasus phone surveillance software after Amnesty International and the Paris-based Forbidden Stories released a list of 50,000 potential targets across the world. Several other countries have initiated their own inquiries into the purported spy scandal that first came to light in 2019.

    The Isreali Ambassador's assertion clearly proves that the alleged compromising of the phones of the reported 150 Indian journalists, politicians, and former bureacrats including electoral stragetist Prashant Kishore, CEO of IPAC and a key member of Mamata Banerjee's election strategy, could not have been possible without the government having a hand in the procurement of Pegasus Spyware.  During an interview on NDTV the other day, Mr N. Ram, publisher of the Hindu, said that Amnesty International has developed a proven software which can test whether a phone has been hacked through remote-controlled Pegasus Spyware.  This test has been internationally accepted by forensic departments and the results can be used as evidence in court cases.  So the Expert Committee fixed by the Supreme Court of India can seek their help for conclusive evidence .  

Leave a Reply

Your email address will not be published. Required fields are marked *