Introduction
Recent developments in the cybersecurity landscape have raised significant concerns regarding the use of spyware by government entities. A report by Kaspersky has identified a new spyware known as Dante, which has been linked to Memento Labs, a surveillance technology company based in Milan. The CEO of Memento Labs, Paolo Lezzi, confirmed that the spyware in question was indeed developed by his company, revealing a complex web of government involvement and cybersecurity vulnerabilities.
Background on Memento Labs and Dante Spyware
Memento Labs was established in 2019 after the acquisition of the notorious spyware firm Hacking Team. Following this acquisition, the company aimed to distance itself from the previous controversies associated with Hacking Team, which had faced backlash for its role in facilitating human rights abuses through its surveillance technologies. The Dante spyware, which targets Windows systems, was identified by Kaspersky researchers as being used in espionage activities primarily within Russia and Belarus.
Confirmation of Malware Use
Lezzi acknowledged that the malware detected by Kaspersky was an outdated version of Dante, which Memento Labs plans to discontinue by the end of the year. He indicated that a government customer had inadvertently exposed the spyware due to its use of an obsolete version. Lezzi expressed surprise that the customer was still operating the outdated agent, emphasizing that the company had previously advised all clients to cease using the Windows malware following Kaspersky's detection of infections since December 2024.
Kaspersky's Findings and Implications
Kaspersky's report highlighted the activities of a hacking group dubbed "ForumTroll," which utilized the Dante spyware to target a variety of sectors, including media, educational institutions, and governmental organizations in Russia. The group demonstrated a strong understanding of Russian language and culture, although occasional errors indicated that not all members were native speakers. This suggests a sophisticated level of operation, potentially indicating state-sponsored motives behind the attacks.
Legacy of Hacking Team and Current Operations
Lezzi disclosed that while Memento Labs has transitioned to developing primarily mobile spyware, remnants of the original Hacking Team's software may still exist within Dante. The company has faced scrutiny over its historical ties to Hacking Team, which was notorious for enabling surveillance against activists and journalists. Lezzi noted that only a small fraction of Hacking Team's former customers remain, and Memento Labs is actively working to redefine its image in the surveillance technology industry.
Conclusion
The emergence of Memento Labs and its spyware, despite the controversies surrounding its predecessor, underscores the persistent challenges in regulating surveillance technologies. As highlighted by cybersecurity experts, the evolution of such companies illustrates a troubling trend where the fallout from past scandals does not prevent new entities from engaging in similar practices. The case of Dante serves as a reminder of the ongoing need for vigilance and accountability in the realm of cybersecurity, particularly as government entities continue to leverage these tools for surveillance purposes.