African States Quick To Adopt Network Surveillance

Governments in Sudan, Nigeria, South Africa and Ethiopia are the latest to deploy sophisticated network eavesdropping tools against their citizens. 

Uganda has been using a surveillance program, codenamed Fungua Macho, or “open eyes” in Swahili, to spy on opposition politicians and anyone “deemed dangerous to state security,” according to an investigation by Privacy International and BBC Newsnight. Policy documents dating back to 2012 detail the use of the security software called Finfisher and 70 intelligence officers to collect data on potential threats, although Ugandan authorities deny the operation’s existence.

Uganda isn’t alone. African countries are entering the world’s newest arms race, for cyber weapons and surveillance, at a rapid clip. According to a recent Wall Street Journal report, an estimated 29 countries around the world now have formal or military units dedicated to cyber warfare, and 63 countries have used cyber surveillance on their own citizens or abroad. Of those, four were in sub-Saharan Africa.

Ethiopia
Ethiopian authorities are suspected of using off-the shelf hacking software to spy on journalists and members of the Ethiopian diaspora living in the United States and Europe. An American citizen who was born in Ethiopia filed a lawsuit against the government claiming his Skype (pdf) have been monitored and recorded by Ethiopian authorities.
CitizenLab, a watchdog group that is part of Canada’s Munk School of Global Affairs, believes that at least some of the attacks were done by the Ethiopian. Hacking Team, the Italian provider of “offensive security technology” that sold software to Ethiopia, says they stopped providing their service last year.
Within Ethiopia, the government’s control over the telecom sector means that it has easy access to the phone records of citizens, according to Human Rights Watch. A former opposition party member told last year, “They showed me a list of all my phone calls and they played a conversation I had with my brother. They arrested me because we talked about politics on the phone. It was the first phone I ever owned, and I thought I could finally talk freely.”

Nigeria
News reports last year claimed the government had completed a $40 million contract with an Israeli company for a surveillance system. Citizen Lab also found evidence of US and UK-developed monitoring software in Nigeria in 2013. Privacy advocates say that Nigeria has alack of detailed privacy laws and that its citizens are thus vulnerable to monitoring by their government as well as foreign ones.

South Africa
Policy documents dated 2006 revealed procedures for electronic, as well as physical, surveillance of individuals in the country were made public earlier this year. Authorities said last year that, “South Africa requires the protection of its cyber-domain, through…a comprehensive information”. Critics say South Africa’s secretive is at the center of the country’s surveillance programs and operates above the law.

Sudan
In 2011, Sudan established the Cyber Jihadist Unit, using equipment developed in Italy, to monitor political opposition figures and journalists, according to Citizen Lab. Last year, the head of the National Assembly’s communications committee said that surveillance of phone calls would stop but critics say it has continued.

DefenseOne:

« US Drone Registry Set Up In Response to Safety Concerns
NATO Forces Shoot Down a Russian Drone Over Turkey. »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

NSFOCUS Information Technology

NSFOCUS Information Technology

NSFOCUS is a global service provider and enterprise DDoS mitigation solution provider.

Norton Rose Fulbright

Norton Rose Fulbright

Norton Rose Fulbright is a global business law firm. Practice areas include Data protection, Privacy and Cybersecurity.

Perspective Risk

Perspective Risk

Perspective Risk provides penetration testing, security assessments, risk management & compliance solutions, InfoSec training and consultancy services.

International School of IT Security (ISITS)

International School of IT Security (ISITS)

The International School of IT Security (ISITS) is a leading provider of professional training in the field of IT Security.

Schneider Electric

Schneider Electric

Schneider Electric develops connected technologies and solutions to manage energy and process in ways that are safe, reliable and sustainable.

NordForsk

NordForsk

NordForsk facilitates and provides funding for Nordic research cooperation and research infrastructure. Project areas include digitalisation and digital security.

Uhuru Corp

Uhuru Corp

Uhuru offers a wide variety of IoT products and solutions including enebular® IoT Orchestration Service.

Buglab

Buglab

The Buglab contest and Vigilante Protocol help companies all over the world to discover and fix vulnerabilities on their digital solutions or assets.

Haechi Audit

Haechi Audit

Haechi Audit is a leading smart contract security audit firm. We provide the most secure smart contract security audit and smart contract development services to our global clients.

Estio Training

Estio Training

Estio Training is a specialist digital and IT apprenticeships provider, dedicated to introducing new skills and developing existing talent in businesses across the UK.

Privakey

Privakey

Transaction Intent Verification. Privakey delivers a secure channel to streamline high risk transactions, enabling digital trust between services and their users.

Firesand

Firesand

Based in Milton Keynes, Firesand Ltd provides penetration testing services to improve your cyber security and protect your company against hackers.

Cyber Capital Partners

Cyber Capital Partners

Cyber Capital Partners build strategic and financial partnerships with small and mid-sized cybersecurity companies in highly regulated markets.

Secur-Serv

Secur-Serv

Secur-Serv is a security-first managed services provider. We provides Managed IT, Managed Print, Managed Device, and Cybersecurity services to companies of every size.

When Group

When Group

World Health Energy Holdings, Inc. (d/b/a WHEN Group) is a High Tech Holding Company that specializes in the Cyber, Security and Telecom area.

Minimus

Minimus

Minimus, a pioneering application security startup, offers a groundbreaking platform that eliminates over 95% of Common Vulnerabilities and Exposures (CVEs) from software supply chains.