> the court warned it would not feel reluctant to impose sanctions
Ah okay so basically we're doing the ol' "going on your permanent record" treatment. That means nothing to a state sanctioned malware team.
They do [1]. That doesn't affect the supremacy of U.S. law.
> so basically we're doing the ol' "going on your permanent record" treatment
Sanctions in law means punishment [2]. In civil law, "sanctions are usually monetary fines." But Meta may go further in seeking damages in equity, which could range from injunctions on NSO targeting Meta to distribution restrictions in the U.S.
Note that NSO and its leadership are already blacklisted by Commerce [3]. This is the same designation we've put on e.g. Russia and Belarus's militaries [4].
[1] https://www.theguardian.com/news/article/2024/jul/25/israel-...
[2] https://en.wikipedia.org/wiki/Sanctions_(law)
[3] https://www.reuters.com/technology/us-blacklists-four-compan...
[4] https://www.commerce.gov/news/press-releases/2022/04/commerc...
For example knowing that there are few legal options to deal with Russian groups who were doing ransomware attacks on hospitals there was recently a public name and shame campaign that lots of people had this exact kind of response to but the actual way they were looking to impose costs on these groups was by making sure that other crime groups in the country were very aware of who these people were, that they didn’t have any meaningful protection but they did have a lot of crypto money that would be very easy to rob from them. The idea was to put them in harms way since as the theory goes it would cause others to think twice.
Tactics differ obviously depending on the target and what options make sense but this was for a non state backed group who didn’t have anything other than a cyber component to them.
Do you think relatively highly paid individuals don't take foreign vacations?
> [1] That was true for the men released Thursday. Both were arrested on vacation in countries that cooperate with the U.S. Klyushin was arrested in Sion, Switzerland — four people alleged to be co-conspirators remain at large — and Seleznev in Maldives.
[1]: https://www.nbcnews.com/tech/security/us-releases-russian-ha...
They do pop Russians traveling outside of the CIS country region on vacation[1].
>According to Europol, a suspected LockBit ransomware developer was arrested in August 2024 at the request of French authorities while on holiday outside of Russia.
https://www.bleepingcomputer.com/news/security/police-arrest...
One of my favorite quotes about these hackers in CIS is, "Who cares if you have hundreds of millions of dollars, you are still stuck in Russia or the CIS region for the rest of your life".
True, but the USG has a long memory and holds grudges. Even if they never travel, they have to be confident every future government of the country will have their back. What's the odds the North Korean or Russian regime substantially changes in their lifetimes? Probably higher than the chance a future US administration will stop caring about an outstanding warrant.
“So and so is looking to arrest you, it would really suck if you got deported or put on this ‘vacation’ to France, wouldn’t it?”
Worth paying up, but if you’re willing to pay anything…
Malware companies have openly operated in Israel for decades: https://en.wikipedia.org/wiki/Download_Valley How many extraditions of those guys to America from anywhere have there ever been?
So yes. That's exactly what they'll do.
NSO does business via various parent corps, subsidiaries, and other entities around the globe. https://en.wikipedia.org/wiki/NSO_Group#Overview
Probably not, given NSO has been blacklisted since 2021 [1].
That doesn't mean they don't use NSO's products. But they're buying it secondhand or reverse engineering it. Same as we'd do for e.g. an Iranian drone innovation.
[1] https://www.reuters.com/technology/us-blacklists-four-compan...