logo

Wikileaks reveals BD spyware purchase

Sunday, 2 November 2014


Wikileaks has blown the whistle on the purchase of a German surveillance software by a Bangladesh law-enforcing agency to monitor the country's digital traffic. This revelation has exposed the lack of privacy. Though the Constitution and Right to Information Act 2009 address the privacy issue of a citizen; there seems to be enough holes yet to be plugged. The software is FinFisher, aka FinSpy, and mostly used by law-enforing agencies around the world . The software can be installed in target computers through hoax software updates and emails with fake attachments. Antivirus software cannot detect the malware and it has the ability to take full control of infected computers and it can decipher information from encrypted data and communications. Wikileaks says the majority of the customers of the malware are identified by a 8-digit alphanumeric username. Like Bangladesh, some of the customers are identified by a closer look at the support requests. According to Wikileaks, a Bangladeshi agency spent around €831060 to purchase 3 FinSpy-licenced software and 3 FinFly USB back in Nov in 2012. Two of the software and USBs expired in Nov 2013. Another software with the USB will expire on Nov 16 this year.
Each software allows two agents to operate it and can monitor 20 targets (infected computer or mobile phone) at the same time.
Wikileaks also reveals that one “Arefin” from Bangladesh had made a support request to the support team of the spyware company about feeding from a target ( infected) computer, says a news agency.