Jurre van Bergen
@jurrevanbergen.nl
Technologist at Amnesty's Security Lab. Here's how to contact me securely: https://gist.github.com/DrWhax/61978d4e7df5291d4cf308f10dc20d5a
Treasury said in an email that the removal "was done as part of the normal administrative process in response to a petition request for reconsideration." It added that each of the individuals had "demonstrated measures to separate themselves from the Intellexa Consortium."
😱
😱
New: Trump administration removes three spyware-linked executives from sanctions list
www.reuters.com/business/tru...
www.reuters.com/business/tru...
Trump administration removes three spyware-linked executives from sanctions list
President Donald Trump's administration has lifted sanctions on three executives tied to the spy software consortium Intellexa, according to a notice published to the U.S. Treasury's website.
www.reuters.com
December 31, 2025 at 1:58 AM
Treasury said in an email that the removal "was done as part of the normal administrative process in response to a petition request for reconsideration." It added that each of the individuals had "demonstrated measures to separate themselves from the Intellexa Consortium."
😱
😱
Gambazzi, Hamou and Harpaz, who previously were sanctioned in relation to Intellexa. Got removed from sanctions today.
ofac.treasury.gov/recent-actio...
ofac.treasury.gov/recent-actio...
Non Proliferation and Iran-related Designations; Cyber-related and Russia-related Designations Removals | Office of Foreign Assets Control
ofac.treasury.gov
December 30, 2025 at 6:01 PM
Gambazzi, Hamou and Harpaz, who previously were sanctioned in relation to Intellexa. Got removed from sanctions today.
ofac.treasury.gov/recent-actio...
ofac.treasury.gov/recent-actio...
Reposted by Jurre van Bergen
Previously unknown instructions & settings sheets for the SG-41 have been discovered in Czech archives! Thanks to Eugen Antal, Carola Dahlke & Robert Jahn who published them in Cryptologia.
I've been working to bring these into Virtual SG-41
@tnmoc.bsky.social @cryptomuseum.bsky.social
I've been working to bring these into Virtual SG-41
@tnmoc.bsky.social @cryptomuseum.bsky.social
December 21, 2025 at 9:06 AM
Previously unknown instructions & settings sheets for the SG-41 have been discovered in Czech archives! Thanks to Eugen Antal, Carola Dahlke & Robert Jahn who published them in Cryptologia.
I've been working to bring these into Virtual SG-41
@tnmoc.bsky.social @cryptomuseum.bsky.social
I've been working to bring these into Virtual SG-41
@tnmoc.bsky.social @cryptomuseum.bsky.social
Reposted by Jurre van Bergen
The Pope involves himself in Italy's spy scandal and asks intel officials to respect people's privacy and not leak data and smear people with hacked data
www.reuters.com/world/pope-t...
www.reuters.com/world/pope-t...
Pope tells Italian spies not to smear politicians or journalists
Pope Leo on Friday urged Italy's intelligence services to avoid smearing public figures and journalists, saying abuse of confidential material risked undermining democracy and public trust.
www.reuters.com
December 14, 2025 at 5:56 PM
The Pope involves himself in Italy's spy scandal and asks intel officials to respect people's privacy and not leak data and smear people with hacked data
www.reuters.com/world/pope-t...
www.reuters.com/world/pope-t...
Reposted by Jurre van Bergen
Found two Edge Group brochures for their IMSI-Catcher products that I haven't seen publicly before: github.com/DrWhax/edgeg...
GitHub - DrWhax/edgegroup: imsi-catchers
imsi-catchers. Contribute to DrWhax/edgegroup development by creating an account on GitHub.
github.com
December 10, 2025 at 1:15 PM
Found two Edge Group brochures for their IMSI-Catcher products that I haven't seen publicly before: github.com/DrWhax/edgeg...
Reposted by Jurre van Bergen
In 2021, the FTC issued a ban on stalkerware-maker Spyfone and its CEO, Scott Zuckerman. Earlier this year, Zuckerman requested that the ban be vacated because it's inconvenient for him. The FTC has voted 2-0 to deny his request. Good. www.ftc.gov/news-events/...
FTC Denies Petition from SpyFone App CEO to Vacate 2021 Order
The Federal Trade Commission has denied a petition from Scott Z
www.ftc.gov
December 8, 2025 at 8:44 PM
In 2021, the FTC issued a ban on stalkerware-maker Spyfone and its CEO, Scott Zuckerman. Earlier this year, Zuckerman requested that the ban be vacated because it's inconvenient for him. The FTC has voted 2-0 to deny his request. Good. www.ftc.gov/news-events/...
Reposted by Jurre van Bergen
One Laptop Per Child, 10 years later: "we find no significant effects on academic performance but some evidence of negative effects on grade progression... computer access significantly improved students’ computer skills but not their cognitive skills" www.nber.org/papers/w34495
Laptops in the Long Run: Evidence from the One Laptop per Child Program in Rural Peru
Founded in 1920, the NBER is a private, non-profit, non-partisan organization dedicated to conducting economic research and to disseminating research findings among academics, public policy makers, an...
www.nber.org
December 7, 2025 at 1:57 PM
One Laptop Per Child, 10 years later: "we find no significant effects on academic performance but some evidence of negative effects on grade progression... computer access significantly improved students’ computer skills but not their cognitive skills" www.nber.org/papers/w34495
Reposted by Jurre van Bergen
It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings. via @timstarks.bsky.social cyberscoop.com/intellexa-re...
Intellexa remotely accessed Predator spyware customer systems, investigation finds
It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings.
cyberscoop.com
December 4, 2025 at 10:31 PM
It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings. via @timstarks.bsky.social cyberscoop.com/intellexa-re...
Interesting artefact in the uploaded JSKit code used by Intellexa from Google's Threat Intelligence Group.
"//TODO: va bene solo per ios 15 perchè l'exploit è uguale per tutte le version 15.0.x infatti se inferiore a 15.1 restituisce sempre 15.0" - some italian....
cloud.google.com/blog/topics/...
"//TODO: va bene solo per ios 15 perchè l'exploit è uguale per tutte le version 15.0.x infatti se inferiore a 15.1 restituisce sempre 15.0" - some italian....
cloud.google.com/blog/topics/...
Intellexa’s Prolific Zero-Day Exploits Continue | Google Cloud Blog
Commercial surveillance vendor Intellexa continues to thrive and exploit mobile zero-day vulnerabilities.
cloud.google.com
December 4, 2025 at 9:20 PM
Interesting artefact in the uploaded JSKit code used by Intellexa from Google's Threat Intelligence Group.
"//TODO: va bene solo per ios 15 perchè l'exploit è uguale per tutte le version 15.0.x infatti se inferiore a 15.1 restituisce sempre 15.0" - some italian....
cloud.google.com/blog/topics/...
"//TODO: va bene solo per ios 15 perchè l'exploit è uguale per tutte le version 15.0.x infatti se inferiore a 15.1 restituisce sempre 15.0" - some italian....
cloud.google.com/blog/topics/...
Reposted by Jurre van Bergen
Insikt Group researchers found new evidence of Predator's continued deployment in Iraq and Pakistan. New shell companies and other interconnected firms also discovered and suggest "expanding network footprint."
therecord.media/intellexa-pr...
therecord.media/intellexa-pr...
Researchers find Predator spyware is being used in several countries, including Iraq
Researchers also found indicators “likely associated” with the use of Predator spyware by an entity tied to Pakistan.
therecord.media
December 4, 2025 at 5:08 PM
Insikt Group researchers found new evidence of Predator's continued deployment in Iraq and Pakistan. New shell companies and other interconnected firms also discovered and suggest "expanding network footprint."
therecord.media/intellexa-pr...
therecord.media/intellexa-pr...
Great reporting by @lorenzofb.bsky.social who got Memento Lab's CEO, Paolo Lezzi, to admit they also use Teamviewer(??) to login to remote customer systems if they are asked to help with technical problems. Bizarre. techcrunch.com/2025/12/04/s...
December 4, 2025 at 6:26 PM
Great reporting by @lorenzofb.bsky.social who got Memento Lab's CEO, Paolo Lezzi, to admit they also use Teamviewer(??) to login to remote customer systems if they are asked to help with technical problems. Bizarre. techcrunch.com/2025/12/04/s...
Reposted by Jurre van Bergen
NEW: Staffers at notorious spyware maker Intellexa had live remote access to their customers' surveillance systems.
This allowed them to see the personal data of targets hacked with Intellexa's spyware Predator, according to research based on a leaked training video.
Needless to say, this is bad.
This allowed them to see the personal data of targets hacked with Intellexa's spyware Predator, according to research based on a leaked training video.
Needless to say, this is bad.
Sanctioned spyware maker Intellexa had direct access to government espionage victims, researchers say | TechCrunch
Based on a leaked video, security researchers alleged that Intellexa staffers have remote live access to their customers' surveillance systems, allowing them to see hacking targets’ personal data.
techcrunch.com
December 4, 2025 at 6:17 PM
NEW: Staffers at notorious spyware maker Intellexa had live remote access to their customers' surveillance systems.
This allowed them to see the personal data of targets hacked with Intellexa's spyware Predator, according to research based on a leaked training video.
Needless to say, this is bad.
This allowed them to see the personal data of targets hacked with Intellexa's spyware Predator, according to research based on a leaked training video.
Needless to say, this is bad.
Reposted by Jurre van Bergen
🔥 The #IntellexaLeaks
⚠ Νέα διεθνής έρευνα του @insidestory.gr σε συνεργασία με την @haaretzcom.bsky.social, WAV Research Collective και την τεχνική συνδρομή του Εργαστηρίου Ασφαλείας της @amnesty.org προχωρά σήμερα σε σημαντικές αποκαλύψεις: insidestory.gr/article/inte...
⚠ Νέα διεθνής έρευνα του @insidestory.gr σε συνεργασία με την @haaretzcom.bsky.social, WAV Research Collective και την τεχνική συνδρομή του Εργαστηρίου Ασφαλείας της @amnesty.org προχωρά σήμερα σε σημαντικές αποκαλύψεις: insidestory.gr/article/inte...
December 4, 2025 at 1:24 PM
🔥 The #IntellexaLeaks
⚠ Νέα διεθνής έρευνα του @insidestory.gr σε συνεργασία με την @haaretzcom.bsky.social, WAV Research Collective και την τεχνική συνδρομή του Εργαστηρίου Ασφαλείας της @amnesty.org προχωρά σήμερα σε σημαντικές αποκαλύψεις: insidestory.gr/article/inte...
⚠ Νέα διεθνής έρευνα του @insidestory.gr σε συνεργασία με την @haaretzcom.bsky.social, WAV Research Collective και την τεχνική συνδρομή του Εργαστηρίου Ασφαλείας της @amnesty.org προχωρά σήμερα σε σημαντικές αποκαλύψεις: insidestory.gr/article/inte...
A special thanks to the courageous sources who stepped forward and made #IntellexaLeaks possible. This wouldn't have been possible without them.
a man in a suit and tie is giving a thank you sign .
ALT: a man in a suit and tie is giving a thank you sign .
media.tenor.com
December 4, 2025 at 1:35 PM
A special thanks to the courageous sources who stepped forward and made #IntellexaLeaks possible. This wouldn't have been possible without them.
Happy holidays Intellexa, xoxo.
December 4, 2025 at 1:12 PM
Happy holidays Intellexa, xoxo.
🚨 - New report by Haaretz, Inside Story, Inside-IT and Amnesty International release the Intellexa Leaks. Which exposes Intellexa support staff had access through Teamviewer to customer deployments and confirms found IOC's in the past by civil society. 🧵👇
December 4, 2025 at 11:37 AM
🚨 - New report by Haaretz, Inside Story, Inside-IT and Amnesty International release the Intellexa Leaks. Which exposes Intellexa support staff had access through Teamviewer to customer deployments and confirms found IOC's in the past by civil society. 🧵👇
Reposted by Jurre van Bergen
1/ Today we release a new report exposing previously undisclosed entities connected to the wider #Intellexa ecosystem as well as newly identified activity clusters in Iraq and indications of activity in Pakistan: www.recordedfuture.com/research/int...
Intellexa’s Global Corporate Web
www.recordedfuture.com
December 4, 2025 at 4:18 AM
1/ Today we release a new report exposing previously undisclosed entities connected to the wider #Intellexa ecosystem as well as newly identified activity clusters in Iraq and indications of activity in Pakistan: www.recordedfuture.com/research/int...
Reposted by Jurre van Bergen
🚨NEW🚨 At the southern border, officers use Cellebrite forensic devices to access iPhones of immigration crime suspects.
Except they don't always get the data CBP wants. So CBP orders Apple to provide it instead.
A CBP playbook on border surveillance.
www.forbes.com/sites/the-wi...
Except they don't always get the data CBP wants. So CBP orders Apple to provide it instead.
A CBP playbook on border surveillance.
www.forbes.com/sites/the-wi...
Border Patrol’s Digital Playbook: Hack iPhones, Raid iCloud Accounts
A CBP search warrant shows how it relies on data raids on iClouds when its forensics tools can't get enough information from iPhones.
www.forbes.com
December 2, 2025 at 8:37 PM
🚨NEW🚨 At the southern border, officers use Cellebrite forensic devices to access iPhones of immigration crime suspects.
Except they don't always get the data CBP wants. So CBP orders Apple to provide it instead.
A CBP playbook on border surveillance.
www.forbes.com/sites/the-wi...
Except they don't always get the data CBP wants. So CBP orders Apple to provide it instead.
A CBP playbook on border surveillance.
www.forbes.com/sites/the-wi...
Reposted by Jurre van Bergen
New report by 🇫🇷France's National Cyber Security Agency (@anssi-fr.bsky.social) on the threat landscape for mobile phones since 2015.
👇
www.cert.ssi.gouv.fr/uploads/CERT...
👇
www.cert.ssi.gouv.fr/uploads/CERT...
November 27, 2025 at 6:46 AM
New report by 🇫🇷France's National Cyber Security Agency (@anssi-fr.bsky.social) on the threat landscape for mobile phones since 2015.
👇
www.cert.ssi.gouv.fr/uploads/CERT...
👇
www.cert.ssi.gouv.fr/uploads/CERT...
Who'd like to read a book on the Intellexa Alliance?
November 25, 2025 at 2:40 PM
Who'd like to read a book on the Intellexa Alliance?
Reposted by Jurre van Bergen
Happy to have written this new blogpost from Brave Research, based on work at Internet Architecture Board, with Hamed Haddadi and Kyle Den Hartog.
brave.com/blog/zkp-age...
1/3
brave.com/blog/zkp-age...
1/3
November 6, 2025 at 3:52 PM
Happy to have written this new blogpost from Brave Research, based on work at Internet Architecture Board, with Hamed Haddadi and Kyle Den Hartog.
brave.com/blog/zkp-age...
1/3
brave.com/blog/zkp-age...
1/3
Bluesky had zero funny dick Cheney joke today. I saw multiple good one on X.
November 4, 2025 at 10:39 PM
Bluesky had zero funny dick Cheney joke today. I saw multiple good one on X.
Reposted by Jurre van Bergen
Readers in Chinese-speaking regions can now gain deeper insights into our findings on Geedge's suite!
Our report “The Internet Coup” is now available in Traditional Chinese (using Taiwanese terminology), thanks to the translation by @anoni.net. #GreatFirewallExport
anoni.net/docs/report/...
Our report “The Internet Coup” is now available in Traditional Chinese (using Taiwanese terminology), thanks to the translation by @anoni.net. #GreatFirewallExport
anoni.net/docs/report/...
網路政變 / The Internet Coup | InterSecLab - 匿名網路社群 Anoni.net/Docs
關於中國網路防火牆服務輸出到其他國家，希望引起各界對網路自由和網路治理的反思和警覺
anoni.net
October 30, 2025 at 3:15 PM
Readers in Chinese-speaking regions can now gain deeper insights into our findings on Geedge's suite!
Our report “The Internet Coup” is now available in Traditional Chinese (using Taiwanese terminology), thanks to the translation by @anoni.net. #GreatFirewallExport
anoni.net/docs/report/...
Our report “The Internet Coup” is now available in Traditional Chinese (using Taiwanese terminology), thanks to the translation by @anoni.net. #GreatFirewallExport
anoni.net/docs/report/...
More research being conducted on the Geedge Networks dataset. @domaintools.bsky.social started a series dissecting the Geedge leak and posted their 1st part out of 3. dti.domaintools.com/inside-the-g... #GFWExport
Inside the Great Firewall Part 1: The Dump - DomainTools Investigations | DTI
Analysis of the 500GB+ Great Firewall data breach revealing China’s state censorship network, VPN evasion tactics, and the operators behind it.
dti.domaintools.com
October 31, 2025 at 12:05 PM
More research being conducted on the Geedge Networks dataset. @domaintools.bsky.social started a series dissecting the Geedge leak and posted their 1st part out of 3. dti.domaintools.com/inside-the-g... #GFWExport