Austrian spy firm accused by Microsoft used hacking tool in EU

An Austrian agency which Microsoft mentioned created malicious software program that was detected on the pc techniques of a few of its purchasers in a minimum of three nations has mentioned its spying instrument “Subzero” was for official use in EU states solely.

On Wednesday, Microsoft mentioned the agency, DSIRF, had deployed the spying software program, or adware — able to accessing confidential data reminiscent of passwords or log-in credentials — at an unspecified variety of unidentified banks, regulation corporations, and strategic consultancies.

“Subzero is a software program of the Austrian DSIRF GesmbH, which has been developed completely for official use in states of the EU. It’s neither supplied, offered nor made accessible for industrial use,” DSIRF mentioned in an emailed assertion.

“In view of the information described by Microsoft, DSIRF resolutely rejects the impression that it has misused Subzero software program,” it added.

It was not clear which EU member state governments, if any, have been utilizing the instrument. DSIRF didn’t reply to requests for additional remark.

Austria’s inside ministry informed native information company APA on Friday that it was investigating the Microsoft claims. The ministry didn’t reply to requests from Reuters for remark.

Spyware and adware instruments have come into elevated focus in Europe and the US after Pegasus, adware developed by Israel’s NSO was discovered to have been utilized by governments to spy on journalists and dissidents.

DSIRF mentioned they’d commissioned an impartial professional to analyze the problems raised by Microsoft, and had reached out to the U.S. tech large for “collaboration on the problem”.

Microsoft declined to supply additional remark.

In its Thursday weblog put up, the corporate mentioned DSIRF had developed 4 so-called “zero-day exploits”, severe software program flaws of nice worth to each hackers and spies as a result of they work even when software program is updated.

DSIRF listed a handful of earlier, industrial, purchasers as references in an inner presentation selling Subzero that was revealed by the German information web site Netzpolitik final 12 months.

Two of the businesses that have been named in that presentation, SIGNA Retail and Dentons, informed Reuters they’d not used the adware and had not consented to be a reference for the corporate.

DSIRF didn’t reply to a request for touch upon the matter.