El Faro Journalists Hit by Extensive Surveillance Attack

Salvadoran Investigative Journalists Encounter Cyber Espionage

El Faro, a pioneering online newspaper leading the way in independent and principled journalism in Central America, recently fell victim to cyber surveillance. Journalists from the outlet began to experience anomalies with their smartphones, including rapid battery depletion and unusual overheating, prompting concerns of a security breach. This feeling of unease led to the involvement of Citizen Lab, a research group specializing in digital surveillance oversight.

The ensuing forensic examination unveiled a disturbing truth. One reporter’s device was plagued by Pegasus, a sophisticated spyware typically reserved for military use. Pegasus has the capability to replicate private messages, extract photographs, and manipulate both the camera and microphone of the compromised device. The revelation was not isolated; soon it became apparent that numerous El Faro journalists were targeted in an extensive spying operation.

El Faro’s Julia Gavarrete expressed the perturbing realization that the surveillance extended beyond an individual level to encompass the organization as a whole. In search of answers, Reveal joined forces with the Shoot the Messenger podcast to delve into the issue. Together, they embarked on an exposé to decipher the origins of what is considered one of the most significant Pegasus hacking scandals to date. This collaborative investigation revisits and updates information first brought to light in a podcast episode from September 2023.

Salvadoran Investigative Journalists Encounter Cyber Espionage

El Faro, an independent news organization located in El Salvador, has encountered serious issues of cyber espionage. The team at El Faro became suspicious of foul play after noticing alarming signs such as battery drainage and phone overheating, which are common indications of a security breach in smartphones. Citizen Lab, known for their specialized expertise in uncovering digital espionage, was brought in to investigate the situation.

The subsequent forensic analysis confirmed their fears: the presence of the military-grade spyware Pegasus on a journalist’s device. This spyware, notorious for its stealth and destructive potential, can stealthily capture personal messages, photos, and even hijack a phone’s camera and microphone. It was soon evident that this was not an isolated case; a number of El Faro’s journalists were under surveillance.

Important Questions and Key Challenges:

Who is behind the surveillance? Identifying the perpetrators is critical. It is important to know whether the attack was state-sponsored or conducted by other actors with vested interests against El Faro’s journalistic work.

What are the implications for press freedom? Such surveillance can have a chilling effect on freedom of the press and the ability to report without fear of reprisal.

How did the attack go undetected? Analyzing the breach of cybersecurity measures in place at El Faro could identify potential vulnerabilities and help other organizations improve their defenses.

What can be done to protect journalists? This situation underscores the need for better security protocols for journalists, including secure communication channels and regular digital security training.

Advantages and Disadvantages:

Advantages: The exposure of the surveillance can lead to a rallying cry for stronger laws and measures to protect journalists and their sources. The involvement of groups like Citizen Lab also brings attention to the pervasive nature of surveillance technologies, potentially driving policy changes and tech innovations for better security.

Disadvantages: The revelation of such surveillance can create a climate of fear among journalists, potentially deterring investigative reporting. It also suggests that even sophisticated cybersecurity measures can be penetrated, revealing a disconcerting vulnerability among devices that store sensitive information.

Controversies: One of the main controversies surrounding this issue is the use and exportation of Pegasus spyware, made by the Israeli company NSO Group. The sale of such tools for use against journalists and activists has been widely condemned by human rights organizations.

For more information on the topic of press freedom and cyber security, please visit the Committee to Protect Journalists or the Amnesty International. These organizations provide resources and advocacy for safeguarding journalists around the world.