Jeff Bezos phone hacking incident

Jeff Bezos in 2017

In January 2020, the FTI Consulting company claimed that in May 2018 with "medium to high confidence" the phone of Jeff Bezos had been hacked by a file sent from the WhatsApp account of the crown prince of Saudi Arabia, Mohammed bin Salman.[1][2] The Saudi Arabian embassy to the United States has denied the allegations.[3] Billionaire Jeff Bezos, the owner of The Washington Post newspaper and founder of the company Amazon, engaged FTI Consulting in February 2019 after the National Enquirer in January 2019 reported details of Bezos's affair.[4] FTI Consulting did not link the National Enquirer to the hack.[4] In December 2021, the FBI stated they could not find proof to substantiate claims that Saudi Arabia hacked Jeff Bezos phone, and has considered an investigation into those allegations a low priority.[5]

Background

[edit]

Starting in September 2017, The Washington Post, which is owned by Bezos, published a series of columns by Jamal Khashoggi that were critical of Saudi Arabia or bin Salman.[6] In April 2018, Bezos attended a small dinner with bin Salman and exchanged WhatsApp numbers.[6] Bezos and bin Salman proceeded to exchange friendly messages.[7] Khashoggi was murdered in October 2018; Washington Post reporting became increasingly critical of the role of Saudi regime and bin Salman in the murder.[6]

Alleged incident

[edit]

According to a United Nations analysis of the evidence of surveillance on Bezos's phone, the following events occurred on May 1, 2018:[6]

A message from the Crown Prince account was sent to Mr. Bezos through WhatsApp. The message is an encrypted video file. It is later established, with reasonable certainty, that the video's downloader infects Mr. Bezos' phone with malicious code.

Investigations

[edit]

In January 2019, the National Enquirer released details of Bezos having conducted an affair.[8] Bezos had security specialist Gavin de Becker lead an investigation into how the National Enquirer obtained the information.[4]

In February 2019, Bezos wrote a post on Medium, accusing The National Enquirer and its parent company American Media, Inc. (AMI) of extortion and blackmail of him with images of his affair. In the post, Bezos referenced that AMI had been investigated for "various actions they've taken on behalf of the Saudi Government", and stated that the reporting of The Washington Post on the killing of Jamal Khashoggi "is undoubtedly unpopular in certain circles".[9][10]

Later in February 2019, Bezos and de Becker hired digital forensic experts from the FTI Consulting company to analyse Bezos's iPhone.[4] The Wall Street Journal later reported that Bezos did not want to give his phone directly to the Federal Bureau of Investigation (FBI); thus he had FTI Consulting do the work. Some FTI Consulting workers previously worked for the FBI. The Wall Street Journal also reported that FTI Consulting communicated with law enforcement officials about their work.[7]

In March 2019, de Becker wrote an article for The Daily Beast, stating that Bezos' and his "investigators and several experts concluded with high confidence that the Saudis had access to Bezos's phone, and gained private information".[11] de Becker also reported he had presented details of his investigation to law enforcement officials; furthermore, he said there was a "close relationship" between bin Salman and American Media CEO David Pecker.[3] He highlighted that AMI had attempted to have him publicly declare that the investigation into Bezos's phone found that AMI had not used "eavesdropping or hacking in their newsgathering process", and had demanded his declaration that AMI's story was not "influenced in any manner by external forces". Lastly, de Becker stated that it was "unclear" whether AMI knew of the alleged hack by the Saudis.[12]

In April 2019, Bezos was interviewed by federal investigators when the FBI was researching whether Israeli technology company NSO Group had conducted hacks into people and companies in the United States.[13] As of November 2021, probes by the U.S. government have not led to public action against the National Enquirer or Saudi Arabia.[14]

In November 2019, FTI Consulting finished compiling the report for the forensic analysis of Bezos's phone.[2]

The Guardian broke the story on January 21, 2020, of the results of the analysis of Bezos's phone, reporting that the analysis indicated it was highly likely that Bezos's phone had been infiltrated by a malicious video file sent from bin Salman's WhatsApp account.[3][15] FTI Consulting's conclusion was made with "medium to high confidence", the report stated.[1] The full forensic report was published by Motherboard on January 23, 2020.[16]

The report stated that just "hours" after Bezos received the file from bin Salman, his phone began transmitting dramatically higher amounts of data, and that this continued for months.[16] The video in the file was not infected, but the downloader of the file could not be analyzed by investigators because it was encrypted by WhatsApp.[16] The report points to two pieces of circumstantial evidence: first, a November 2018 message from bin Salman to Bezos includes an image resembling the woman Bezos was having an affair with, despite the affair not being public knowledge at the time; second, a February 2019 text from bin Salman to Bezos urges Bezos not to believe everything, after Bezos was briefed on the phone regarding an Internet campaign against him conducted by Saudis.[4][16] The report states that investigators' belief that bin Salman's advisor, Saud al-Qahtani, obtained the hacking software.[4] The report does not link The National Enquirer to the hack.[4]

The United Nations special rapporteur on summary executions and extrajudicial killings Agnès Callamard and special rapporteur on freedom of expression David Kaye reviewed a forensic analysis of Bezos' phone.[17] On January 22, 2020, Callamard and Kaye stated that "the allegations are also reinforced by other evidence of Saudi targeting of dissidents and perceived opponents".[17] They noted other phones that were hacked from May 2018 to June 2018, belonging to two Khashoggi associates (Yahya Assiri and Omar Abdulaziz), an Amnesty International official, and Saudi dissident Ghanem al-Dosari.[6][18][19] The UN experts stated: "During the same period, Mr. Bezos was widely targeted in Saudi social media as an alleged adversary of the Kingdom. This was part of a massive, clandestine online campaign against Mr. Bezos and Amazon, apparently targeting him principally as the owner of The Washington Post."[20][21][22] As a result, Callamard and Kaye called for "immediate investigation" by relevant authorities of the alleged phone hacks, "including investigation of the continuous, multi-year, direct and personal involvement of the Crown Prince in efforts to target perceived opponents."[17][23]

Reaction to allegations

[edit]

In February 2019, Adel al-Jubeir, minister of state for foreign affairs for Saudi Arabia, announced the country had "absolutely nothing to do with the hacking".[24]

In March 2019, AMI released a statement responding to de Becker's column that the only source for their story on Bezos was Michael Sanchez, the brother of Bezos's girlfriend and that there was "no involvement by any other third party whatsoever."[25] A year later, Michael Sanchez sued AMI, stating in court documents that when the National Enquirer first contacted him, they already had "raunchy text messages and nude selfies exchanged" by Bezos and Sanchez's sister. Michael Sanchez denied giving AMI explicit photos and accused AMI of hacking Bezos's phone.[26]

In January 2020, the Twitter account of the kingdom's U.S. embassy explicitly rejected the claim that Saudi Arabia was behind the hack, and called for an investigation into the incident.[3]

Analysis

[edit]

The Guardian speculated in January 2020 that the hacking allegation would weaken bin Salman's ability to attract more Western investors to Saudi Arabia and lead to renewed scrutiny of the murder of Khashoggi and bin Salman's involvement.[3] The outlet also reported that Saudi experts believed that Bezos was hacked because of The Washington Post's coverage of Saudi Arabia, including Khashoggi's criticism of bin Salman.[3] One such expert was Andrew Miller, who served on the national security council under President Obama, who claimed that Bezos' targeting by the crown prince reflects the personality-centric nature of Saudi politics.[3]

The Washington Post in January 2020 quoted security researchers as saying that "Bezos probably fell victim to the iPhone's Achilles' heel: Its defences are so difficult to penetrate that once sophisticated attackers are in, they can go largely undetected." One of the reported reasons for this weakness of the iPhone was that its maker Apple "employs a secretive approach to finding and fixing security".[27]

United Nations special rapporteurs Agnès Callamard and David Kaye stated in January 2020 that the alleged hacking suggests that there was "an effort to influence, if not silence, the Washington Post's reporting on Saudi Arabia", with bin Salman possibly part of the operation.[17] They declared that the alleged hacking was relevant to the issue of whether bin Salman was involved in the killing of Jamal Khashoggi.[28]

MIT Technology Review offered the opinion in January 2020 that FTI Consulting's report "lacks conclusive evidence", noting that it failed to decisively identify the specific spyware used against Bezos.[17]

Motherboard in January 2020 quoted mobile forensic expert Sarah Edwards that FTI's results, as reported in January 2020, were only about 50% complete. Edwards pointed to a lack of analysis of core files, "where that state-sponsored malware is going to be found". Meanwhile, Vladimir Katalov, the leader of an iOS forensics company, opined to Motherboard that it seemed as if the "experts were not qualified enough".[16]

References

[edit]
  1. ^ a b Srivastava, Mehul (January 22, 2020). "Saudi's MBS implicated in hacking of Jeff Bezos's phone". Financial Times. Archived from the original on April 14, 2020. Retrieved May 10, 2020.
  2. ^ a b Kirby, Jen (January 22, 2020). "The Saudi crown prince reportedly hacked Jeff Bezos". Vox. Retrieved May 12, 2020.
  3. ^ a b c d e f g Kirchgaessner, Stephanie. "Jeff Bezos hack: Amazon boss's phone 'hacked by Saudi crown prince'". The Guardian. Archived from the original on February 29, 2020. Retrieved March 3, 2020.
  4. ^ a b c d e f g Rutenberg and Rothfeld, Jim and Michael (January 24, 2020). "Jeff Bezos' Hack Inquiry Falls Short of Implicating National Enquirer". The New York Times. Archived from the original on March 6, 2020. Retrieved March 3, 2020.
  5. ^ Bostock, Bill. "The FBI still hasn't found proof that Saudi Arabia hacked Jeff Bezos' phone and isn't prioritizing that theory, report says". Business Insider. Retrieved December 12, 2023.
  6. ^ a b c d e "Mandate of the Special Rapporteur on extrajudicial, summary or arbitrary executions and mandate of the Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression" (PDF). United Nations Human Rights Office of the High Commissioner. Archived (PDF) from the original on March 17, 2020. Retrieved March 29, 2020.
  7. ^ a b Malsin, Jared; Volz, Dustin; Scheck, Justin (January 22, 2020). "U.N. Suggests Bezos' Phone Was Hacked Using Saudi Crown Prince's Account". The Wall Street Journal. Archived from the original on March 3, 2020. Retrieved March 3, 2020.
  8. ^ Fisher and Zeitchik, Marc and Steven. "Saudi crown prince implicated in hack of Jeff Bezos's phone, U.N. report will say". The Washington Post. Archived from the original on March 3, 2020. Retrieved March 17, 2020.
  9. ^ Liptak, Andrew (March 31, 2019). "Jeff Bezos' investigators believe 'with high confidence' that Saudi Arabia accessed his phone". The Verge. Retrieved May 12, 2020.
  10. ^ Volz, Dustin (January 22, 2020). "Bezos' Phone Was Likely Hacked by Chat Account Linked to Saudi Prince, Audit Finds". The Wall Street Journal. Retrieved May 12, 2020.
  11. ^ "Amazon boss Jeff Bezos's phone hacked by Saudi crown prince – reports". The Times of Israel. Archived from the original on March 3, 2020. Retrieved May 12, 2020.
  12. ^ Bond, Shannon (March 31, 2019). "Saudis hacked Amazon CEO's phone, says Bezos security chief". Financial Times. Archived from the original on March 31, 2019. Retrieved May 12, 2020.
  13. ^ Kirchgaessner, Stephanie. "Jeff Bezos met FBI investigators in 2019 over alleged Saudi hack". The Guardian. Archived from the original on March 3, 2020. Retrieved March 3, 2020.
  14. ^ "Racy Affair Saga Between Jeff Bezos and Enquirer Reaches Final Chapter". Wall Street Journal. December 1, 2021.
  15. ^ Kirchgaessner, Stephanie (January 21, 2020). "Revealed: the Saudi heir and the alleged plot to undermine Jeff Bezos". The Guardian. Retrieved May 9, 2020.
  16. ^ a b c d e Zetter, Kim; Cox, Joseph (January 23, 2020). "Here Is the Technical Report Suggesting Saudi Arabia's Prince Hacked Jeff Bezos' Phone". Motherboard. Retrieved May 9, 2020.
  17. ^ a b c d e O'Neill, Patrick (January 22, 2020). "UN calls for investigation of Saudis allegedly hacking Jeff Bezos". MIT Technology Review. Archived from the original on May 12, 2020. Retrieved May 12, 2020.
  18. ^ Kirchgaessner, Stephanie (January 22, 2020). "'Click I agree': the UN rapporteur says prince tried to intimidate Bezos with message". The Guardian. Retrieved May 10, 2020.
  19. ^ Thorbecke, Catherine (January 23, 2020). "UN links Saudi Crown prince to hack of Jeff Bezos phone". ABC News. Retrieved May 10, 2020.
  20. ^ "Independent UN rights experts call for 'immediate investigation' into alleged Bezos phone back by Saudi Aravia". United Nations News. January 22, 2020. Retrieved July 7, 2021.
  21. ^ "UN experts call for investigation into allegations that Saudi Crown Prince involved in hacking of Jeff Bezos'phone". United Nations Human Rights Office of the High Commissioner. January 22, 2020. Retrieved July 7, 2021.
  22. ^ "Analysis of the Evidence of Surveillance of Mr. Bezos' personal phone" (PDF). United Nations Human Rights Office of the High Commissioner. Retrieved July 7, 2021.
  23. ^ Riley, Charles; Prokupecz, Shimon. "UN calls for investigation after Saudi crown prince implicated in hack of Jeff Bezos' phone". CNN International. Archived from the original on March 3, 2020. Retrieved March 3, 2020.
  24. ^ Eltahir, Nafisa; Neely, Jason. "Saudi Arabia says has 'nothing to do' with Bezos-AMI dispute". Reuters. Retrieved May 10, 2020.
  25. ^ "National Enquirer Says Saudis Didn't Help on Bezos Story". The Daily Beast. March 31, 2019. Retrieved May 9, 2020.
  26. ^ Kirchgaessner, Stephanie (April 6, 2020). "Lawsuit raises questions about source of Jeff Bezos's affair revelation". The Guardian. Retrieved May 12, 2020.
  27. ^ Albergotti, Reed; Timberg, Craig; Greene, Jay (January 30, 2020). "Jeff Bezos's iPhone had Apple's state-of-the-art security, and that may have helped its alleged hackers". The Washington Post. Archived from the original on May 12, 2020. Retrieved May 12, 2020.
  28. ^ Bowman, Verity (January 22, 2020). "Jeff Bezos phone hacking: UN calls for investigation after Saudi Crown Prince implicated". The Daily Telegraph. Retrieved May 12, 2020.
[edit]