Journalists and activists in El Salvador hacked with spyware

Journalists and activists in El Salvador are being hacked with the spyware Pegasus, a software that is used by governments to monitor critics and dissidents.

A report by University of Toronto’s Citizen Lab and digital rights group Access Now found evidence of incursions on 37 devices between July 2020 and November 2021. Amnesty International’s Security Lab confirmed the findings.

Pegasus, the software used to hack the devices, was designed by the Israeli company NSO Group. The software allows operators to access messages, photos and emails from cellphones, as well as record calls and secretly activate microphones and cameras.

Late last year, the U.S. government blacklisted NSO over claims that its spyware was used by repressive governments to hack activists, politicians and journalists. The individuals that were hacked work at human rights groups and other news organizations.

Most of the devices belonged to individuals working for the Salvadoran news outlet El Faro, which has reported on secret talks and deals between El Salvador’s government and gangs to reduce crime levels. El Faro reported that 22 members of its staff were hacked with Pegasus, amounting to a total of 226 times.

"What we have seen with respect to the analysis allows us to size up the violation of privacy to which we have been exposed for 17 months at El Faro," journalist Julia Gavarrete of El Faro told ADN America. “In some cases, months have gone by without knowing if it was for a whole month or one day of the month.”

“This is more than concerning. On the one hand we have sources that we have to take care of... we also have personal conversations, we talk to our family,” she added.

The government of President Nayib Bukele denied using the spyware. "El Salvador is no way associated with Pegasus and nor is a client of NSO Group," said Sofia Medina, a spokeswoman for President Bukele.

El Salvador’s government is investigating the issue, Medina claimed. "We have indications that members of the government were also victims of these attacks," she added.

“It is necessary to have answers from the authorities from an investigation. It is not only about journalists but also about people's lives,” Gavarrete concluded.

“The technology gives access to everything you’re doing on your phone, and we've heard NSO say many times that they would take action to implement human rights policies, said Natalia Krapiva, tech legal counsel at Access Now. "Governments are also not being transparent about the purchase and use of this spyware. They should be accountable. Surveillance of civil societies with these tools shouldn’t be the norm.”