Global spy tool threatens billions of users

Global spy tool threatens billions of users

Share post

Previously there was only the fear of the “transparent Internet user” - now it is a reality: According to ICCL, the spy tool Patternz evaluates millions of RTB data and thus threatens the security of individuals, many companies and even governments. According to ICCL, what looks like an advertising analysis tool is being used for dangerous purposes.

It doesn't just sound scary - it's what the Irish Council for Civil Liberties (ICCL) has discovered. The so-called Real-Time Bidding (RTB) system is intended to guide online advertising worldwide as it auctions off advertisements in real time to the highest bidders. Every user on the web, whether ordinary citizens, employees, self-employed people, politicians and all their relatives, can be seen and assessed through the evaluation of RTB data.

Real-Time Bidding (RTB) data misused

The RTB data is openly available worldwide. The use of the data often goes in completely different directions: Google, for example, openly sends this data to China and Russia. The ICCL has published two reports (“Europe's hidden security crisis" and "America's Hidden Security Crisis"), which show how extremely sensitive information about important EU and US personalities and military personnel is leaked to foreign states and non-state actors via the Real-Time Bidding (RTB) system of online advertising. This system is active on almost all websites and apps.

In the EU and the USA, the analysis of RTB data is prohibited by the GDPR or GDPR and is punished. Of course, this does not stop foreign actors or cyber attackers from evaluating and exploiting the data. The problem with RTB data has been known since 2018. Experts are of the opinion that the GDPR even has the basis to ban real-time bidding – RTB completely.

Risk to EU and US military personnel and political leaders

The ICCL examined tens of thousands of pages of RTB data and discovered targeted data on sensitive US and EU military personnel and politicians, as well as judges, supply managers and other key figures. The ICCL report reveals Cambridge Analytica-style psychological profiling of targets, as well as their movements, financial problems, mental health issues and vulnerabilities.

Foreign states and non-state actors can use RTB to spy on targets' financial problems, mental health, and threats to confidential secrets. Even if targets use secure devices, data about them can be transmitted via RTB from personal devices, their friends, family, and compromising personal contacts.

Spy tool Patternz in use

The ICCL reports also reveal “Patternz,” a previously little-known surveillance tool that RTB uses to profile five billion people, including the driving routes of individuals and their children. Patternz is marketed by a private company headquartered in Kokhav Ya'ir, Israel. In his speech today, Dr. Johnny Ryan, ICCL Senior Fellow:

“The RTB industry’s free flow of data has created a serious national threat. We call on the US Federal Trade Commission, European data protection authorities and the European Commission to act urgently. Industry cannot be allowed to put our elected leaders and military personnel at risk.”

Patternz is advertised as a tool on the web

The Company ISA SECURITY – ISA the Israeli Security Academy & technologies openly promotes its product online saying: “We help national security agencies identify audience patterns and user behavior using data mining and analytics for digital advertising. PATTERNZ enables national security agencies to leverage real-time and historical data generated by user advertising to detect, monitor and predict user actions, security threats and anomalies based on user behavior, location patterns and mobile usage characteristics.”

More at ICCL.ie

 


About ICCL

The Irish Council for Civil Liberties (ICCL) is an Irish non-profit organization dedicated to supporting the civil liberties and human rights of people in Ireland and the rest of the world.


 

Matching articles on the topic

Cybersecurity platform with protection for 5G environments

Cybersecurity specialist Trend Micro unveils its platform-based approach to protecting organizations' ever-expanding attack surface, including securing ➡ Read more

Data manipulation, the underestimated danger

Every year, World Backup Day on March 31st serves as a reminder of the importance of up-to-date and easily accessible backups ➡ Read more

Printers as a security risk

Corporate printer fleets are increasingly becoming a blind spot and pose enormous problems for their efficiency and security. ➡ Read more

The AI ​​Act and its consequences for data protection

With the AI ​​Act, the first law for AI has been approved and gives manufacturers of AI applications between six months and ➡ Read more

Windows operating systems: Almost two million computers at risk

There are no longer any updates for the Windows 7 and 8 operating systems. This means open security gaps and therefore worthwhile and ➡ Read more

AI on Enterprise Storage fights ransomware in real time

NetApp is one of the first to integrate artificial intelligence (AI) and machine learning (ML) directly into primary storage to combat ransomware ➡ Read more

DSPM product suite for Zero Trust Data Security

Data Security Posture Management – ​​DSPM for short – is crucial for companies to ensure cyber resilience against the multitude ➡ Read more

Data encryption: More security on cloud platforms

Online platforms are often the target of cyberattacks, such as Trello recently. 5 tips ensure more effective data encryption in the cloud ➡ Read more