In its announcement, Meta said a seven-month investigation had concluded that Facebook and Instagram accounts had been used to identify targets for surveillance and build online relationships with them that helped with the installation of surveillance software. Many of the targets were human rights workers or dissidents, but others were journalists and potential political adversaries.
Meta said it removed about 100 Facebook and Instagram accounts linked to “an unidentified entity in China” that was making surveillance software aimed at Apple and Android phones, and computers that ran Windows and Mac OS X, among other operating systems.
Among the seven companies Meta said it was banning from its services was one called Cytrox, believed to be based in North Macedonia, which Meta said had been hired for work in countries allied with the United States — including Saudi Arabia, Oman, Germany and the Philippines. The statement left unclear whether the firm’s clients were states, companies or private citizens.
Meta also said it removed 300 Facebook and Instagram accounts belonging to Black Cube, another Israeli-based firm with offices around Europe. The company is known for “social engineering,” essentially working to gain the trust of a target for intelligence gathering.
The report said the company “operated fictitious personas tailored for its targets,” with some posing as graduate students, human right workers, or film or television producers. They would then set up calls and get personal email addresses in an effort to get targets to click on links that put the surveillance software on their devices.
“There is an entire shadow industry out there that operates around the world,” said Nathaniel Gleicher, Meta’s head of security policy. “People focus on how they exploit vulnerabilities, but it’s the deceptive things they do leading up to that exploitation which we also have to expose.”
Ana Swanson and David E. Sanger contributed reporting.