ICE acknowledges it’s utilizing highly effective spyware and adware : NPR

[ad_1] <img src="https://npr.brightspotcdn.com/dims3/default/strip/false/crop/2522x1682+0+0/resize/1100/quality/50/format/jpeg/?url=http%3A%2F%2Fnpr-brightspot.s3.amazonaws.com%2F51%2Fde%2F5380bc49415390199e8d071ef92a%2Fgettyimages-2238859034.jpg" data-template="https://npr.brightspotcdn.com/dims3/default/strip/false/crop/2522x1682+0+0/resize/{width}/quality/{quality}/format/{format}/?url=http%3A%2F%2Fnpr-brightspot.s3.amazonaws.com%2F51%2Fde%2F5380bc49415390199e8d071ef92a%2Fgettyimages-2238859034.jpg" class="img" alt="A man holds his phone up next to a U.S. Customs and Border Protection (CBP) Border Patrol agent during an immigration raid in Chicago on Oct. 4, 2025. The top official of CBP's sister agency, Immigration and Customs Enforcement, confirmed last week that the agency is using powerful spyware that can hack into phones." fetchpriority="high"/> A person holds his telephone up subsequent to a U.S. Customs and Border Safety (CBP) Border Patrol agent throughout an immigration raid in Chicago on Oct. 4, 2025. The highest official of CBP's sister company, Immigration and Customs Enforcement, confirmed final week that the company is utilizing highly effective spyware and adware that may hack into telephones. Octavio Jones/AFP through Getty Pictures conceal caption

toggle caption

Octavio Jones/AFP through Getty Pictures Immigration and Customs Enforcement is utilizing spyware and adware instruments that may intercept encrypted messages as a part of the company's efforts to disrupt fentanyl traffickers, in accordance with a letter despatched final week by the company's appearing director, Todd Lyons.

Lyons' letter, which was reviewed by NPR, mentioned ICE's Homeland Safety Investigations (HSI) is utilizing numerous instruments as a part of its mission to disrupt and dismantle international terrorist organizations "notably these concerned within the trafficking of fentanyl."

Lyons wrote "in response to the unprecedented lethality of fentanyl and the exploitation of digital platforms by transnational legal organizations" he authorized HSI's "use of cutting-edge technological instruments that tackle the particular challenges posed by the International Terrorist Organizations' thriving exploitation of encrypted communication platforms."

His letter, dated April 1, was a belated response to an October inquiry from three Democratic members of the Home Committee on Oversight and Authorities Reform expressing concern concerning the company's potential use of the spyware and adware Graphite, which was created by an Israeli firm, Paragon Options.

The letter is the primary time ICE has indicated it's utilizing Graphite. The company initially signed a $2 million contract with Paragon Options for an unspecified software program product on the finish of the Biden administration. However the contract was swiftly paused till it was revived by the Trump administration final fall.

Graphite makes use of what is named "zero click on" know-how in order that it might probably achieve entry to encrypted messages on a focused machine even when the person by no means clicks on a hyperlink.

The encrypted messaging app WhatsApp disclosed final yr that it found some 90 journalists and members of civil society in numerous nations had been focused with Graphite. Researchers at The Citizen Lab on the College of Toronto's Munk College of World Affairs & Public Coverage later recognized particular journalists and humanitarian help suppliers in Italy whose units had been contaminated with Graphite by way of WhatsApp messages. Paragon ended its contract with Italian authorities businesses in 2025.

Lyons' affirmation that the company is utilizing spyware and adware comes as ICE has ramped up its use of surveillance applied sciences to seek out folks within the U.S. with out authorization as a part of the Trump administration's mass deportation marketing campaign. These instruments have additionally been used extensively on Americans who've protested ICE's actions. The revelation additionally comes shortly earlier than Congress is about to debate whether or not to reauthorize a surveillance regulation, and whether or not to shut a authorized loophole that enables the federal authorities to purchase knowledge about thousands and thousands of People in bulk from business knowledge brokers.

Rep. Summer season Lee, D-Pa., one of many authors of the October letter asking for solutions about ICE's use of spyware and adware, instructed NPR in an announcement, "The response I obtained from ICE makes one factor clear. They're transferring ahead with invasive spyware and adware know-how inside the USA."

Lee expressed disappointment that Lyons didn't present substantive solutions to her questions, together with who could possibly be focused with the know-how and the authorized foundation for utilizing it inside the USA.

"The folks most in danger, together with immigrants, Black and brown communities, journalists, organizers, and anybody talking out in opposition to authorities abuse, deserve greater than secrecy and deflection from an company with a protracted file of overreach and abuse," Lee's assertion mentioned.

Lyons' letter mentioned any use of the device "will adjust to constitutional necessities" and will likely be coordinated with the ICE Workplace of the Principal Authorized Advisor.

The Paragon Options' contract was initially placed on maintain in 2024 to assessment its compliance with an govt order then-President Joe Biden signed in 2023 that bars using business spyware and adware that poses a nationwide safety threat to the USA or poses a threat to be misused by international governments.

Lyons wrote in his letter that in accordance with the 2023 govt order, he had "licensed that HSI's operational use of the particular device doesn't pose important safety or counterintelligence dangers, or important dangers of improper use by a international authorities or international individual."

Paragon Options was bought by an American non-public funding agency AE Industrial Companions in late 2024, which merged with the cybersecurity firm REDLattice. Neither AE Companions or REDLattice returned NPR's request for remark.

Lyons' response alarmed civil liberties advocates who fear concerning the potential for ICE to abuse the device and use it in opposition to targets past drug traffickers and terrorists.

"The most important concern now could be that Lyons' response would not rule out ICE utilizing an administrative subpoena to deploy this malware in opposition to folks residing in the USA as a part of their ideological battle in opposition to constitutionally protected protest," mentioned Cooper Quintin, senior workers technologist on the Digital Frontier Basis, which advocates for digital privateness.

"A particularly invasive surveillance functionality akin to this could require the strongest judicial oversight and affirmation that such intrusion is important and [a] proportionate response to the crime being investigated," Quintin mentioned.

Maria Villegas Bravo, a lawyer with the nonprofit Digital Privateness Data Heart, mentioned the U.S. doesn't have ample rules in place "to cease the U.S. authorities from abusing Constitutional and human rights within the means of utilizing this know-how."

In response to an NPR inquiry to the Division of Homeland Safety about its use of Graphite and the considerations raised, a DHS official who didn't establish themselves wrote, "DHS is a regulation enforcement company. ICE is not any totally different. Using numerous types of know-how in help of investigations and regulation enforcement actions aids within the arrest of legal gang members, youngster intercourse offenders, murderers, drug sellers, identification thieves and extra, all whereas respecting civil liberties and privateness pursuits."

Villegas Bravo mentioned that by paying for Graphite, the U.S. helps to bolster the marketplace for applied sciences which are being exploited by international governments to undermine the privateness of messaging functions and perform invasive surveillance of telephones.

"It is a grave nationwide safety threat as a result of it weakens American vital infrastructure, together with our telecommunications networks," Villegas Bravo mentioned.