{"id":15692,"date":"2026-11-12T09:07:12","date_gmt":"2026-11-12T09:07:12","guid":{"rendered":"https:\/\/sotnews.agency\/?p=15692"},"modified":"2026-11-12T09:07:12","modified_gmt":"2026-11-12T09:07:12","slug":"india-bypasses-own-rules-to-buy-israeli-phone-hacking-tech-cybercrime-news","status":"publish","type":"post","link":"https:\/\/sotnews.agency\/?p=15692","title":{"rendered":"India bypasses own rules to buy Israeli phone-hacking tech | Cybercrime News"},"content":{"rendered":"
\n
\n \t<\/i> Read Time:<\/span>7 Minute, 24 Second <\/div>\n\n <\/div>


\n<\/p>\n

\n

New Delhi, India<\/strong> \u2013 India has exempted an Israeli phone-hacking company from New Delhi\u2019s own rules, allowing it to sell phone-extraction products and surveillance technology to government agencies and sparking concerns and criticism from rights groups and activists.<\/p>\n

An investigation by the digital-rights group Internet Freedom Foundation (IFF) found Indian Home Minister Amit Shah, a close confidante of Prime Minister Narendra Modi, signed off on exemptions from \u201cmake in India\u201d procurement rules, clearing the way for government forensic institutions to buy at least 422 items of foreign technology, including products made by the Israeli firm Cellebrite.<\/p>\n

Modi\u2019s federal government and state governments ruled by his Bharatiya Janata Party are not the only ones who bought this Israeli technology. States governed by the opposition Indian National Congress party, including Himachal Pradesh, Keralam and Karnataka, also purchased similar phone-extraction and cloning tools.<\/p>\n

A review of documents revealed that India\u2019s expansive surveillance capabilities extend far beyond just cloning phones and extracting data without passwords to accessing cloud-based data from social media platforms \u2013 such as Instagram, X and Tinder \u2013 as well as data from connected devices such as Amazon\u2019s Alexa and Google Home.<\/p>\n

Experts argued that India\u2019s current laws offer no guardrails against overreaching surveillance and the data extractions happen in a legal grey zone.<\/p>\n

\u201cIt is clear that there is an expansion of India\u2019s surveillance capabilities and it is becoming both wider and deeper,\u201d said Vrinda Bhandari, a lawyer in the Supreme Court who works on digital rights and privacy issues.<\/p>\n

\u201cIt\u2019s now easier to conduct mass surveillance rather than targeted, specific surveillance and also possible to do more intrusive surveillance,\u201d she told Al Jazeera. \u201c[Today,] surveillance gives you a richer picture of an individual\u2019s life.\u201d<\/p>\n

\"A
A policeman uses his mobile phone to record the movement of antigovernment protesters in New Delhi on July 22, 2026 [Adnan Abidi\/Reuters]<\/figcaption><\/figure>\n

The IFF reviewed a letter also seen by Al Jazeera from India\u2019s Ministry of Home Affairs dated January 7<\/a> in which Shah signed off on a wide-ranging, one-year waiver of \u201cmake in India\u201d rules to clear a path for buying at least 422 forensic items.<\/p>\n

Under \u201cmake in India\u201d procurement rules, preference must be given to eligible Indian manufacturers over foreign suppliers in awarding government contracts. However, the rules allow exemptions with the approval of the minister in charge of the procuring department.<\/p>\n

Another letter by the ministry dated January 20 showed<\/a> Shah permitted the National Investigation Agency (NIA) to buy Israeli company Cellebrite\u2019s Premium Tool<\/a> on a three-year licence for about 50 million rupees ($529,947).<\/p>\n

In specifications demanded by the government that were revealed in a review of tender bids, \u201csolution\u201d software must be capable of using login tokens recovered from seized phones or computers to access more than 100 cloud services. Login tokens are in effect digital keys that keep users signed in to online accounts.<\/p>\n

Although an exemption for a company does not confirm whether a certain product was purchased by any government agency, it points to the range of forensic capabilities that opened up for procurement by Indian agencies.<\/p>\n

From the 422-item exemption list, the IFF identified 118 items under digital and multimedia forensics, including Israeli company Cellebrite\u2019s Pathfinder, Inseyets On-Prem Pro and Inseyets Offline.<\/p>\n

Cellebrite\u2019s tools have been used against journalists and activists in countries like Serbia, Jordan, Kenya and Russia.<\/p>\n

Other products included tools from foreign digital-forensics companies like Magnet, MSAB, Oxygen Forensics and Belkasoft as well as software for open-source intelligence, dark-web monitoring and cryptocurrency investigations.<\/p>\n

Al Jazeera reviewed a request for a bid proposal<\/a> by the Delhi Police for software for its National Cyber Forensic Laboratory, which comes under the Indian Cybercrime Coordination Centre, an initiative of the Home Ministry.<\/p>\n

Consider the capabilities the police department was seeking in its request: software that bypasses passwords on Apple\u2019s macOS, Microsoft Windows and Linux operating systems; recovers internet activity, browser histories, deleted files and identifies traces of VPNs; bypasses screen locks; performs full file system extractions; decrypts backups; and extracts information from messaging applications.<\/p>\n

The Delhi Police demanded another \u201call-in-one\u201d system to access more than 100 cloud services, including Google, Apple, WhatsApp, Instagram, Telegram, Discord and dating platforms such as Tinder, Grindr and OkCupid or platforms like Slack and OnlyFans using account credentials or login tokens recovered from devices. Its specifications also sought the extraction of data from drones, wearable devices and devices like Amazon Alexa and Google Home.<\/p>\n

Al Jazeera reached out to officials at the NIA, the Home Ministry and home departments of opposition-ruled states of Himachal Pradesh, Karnataka and Keralam for comments. The Delhi Police reports to Shah\u2019s mInistry.<\/p>\n

None of them had responded to Al Jazeera by the time of publication.<\/p>\n

\"NEW
YouTuber Dhruv Rathee speaks to the media after his release from police detention on October 11, 2026, in New Delhi, India [Ritesh Shukla\/Getty Images]<\/figcaption><\/figure>\n

\u2018How did they get inside my phone?\u2019<\/h2>\n

For some, the lack of transparency in the surveillance capabilities of India\u2019s security agencies is not just a theoretical concern.<\/p>\n

Last month, when Modi\u2019s government faced street protests demanding the election chief resign, popular YouTuber Dhruv Rathee, a Modi critic,<\/a>\u00a0landed in New Delhi to participate in the demonstrations.<\/p>\n

On the morning of the protest, he was detained by Delhi Police while still at home. His phone was taken from him. Speaking on a podcast later, Rathee said he believed police had tried to clone his iPhone using Israeli company Cellebrite\u2019s tools but the attempt may have failed because his device was running a newer version of the iOS operating system than what the tool was capable of tricking.<\/p>\n

Al Jazeera could not verify Rathee\u2019s account, but Rathee is not alone in this suspicion.<\/p>\n

Mohammad Aslam Hussain, a reporter with the newspaper Siasat Daily, told Al Jazeera that he was detained with a cameraperson on October 10 in New Delhi and his phone was confiscated at the scene.<\/p>\n

\u201cWhen I got my device later in the evening, all recorded footage of our reporting had been selectively deleted from the device,\u201d Hussain said. The reporter uses Samsung\u2019s Android-operated Galaxy S24 secured with a pattern lock and fingerprint authentication.<\/p>\n

Hussain added that he cannot say conclusively what tools the police used to bypass his phone\u2019s authentication requirement. \u201cBut it raises several questions with no one willing to respond to them,\u201d he added. \u201cHow did they get inside my phone?\u201d<\/p>\n

The Indian government has faced accusations that it has used sophisticated spyware against journalists, activists, lawyers and political opponents during Modi\u2019s years in power.<\/p>\n

In 2019, WhatsApp disclosed that the Pegasus spyware, developed by the Israeli firm NSO Group, had been used to target Indian journalists and human rights defenders. Forensic examinations by Amnesty International later confirmed Pegasus infections on the phones of journalists Siddharth Varadarajan and Anand Mangnale. The government has denied allegations of unauthorised surveillance.<\/p>\n

Bhandari told Al Jazeera that another problem in holding overarching surveillance to account is identifying the affected party. Often, she pointed out, the person placed under surveillance \u201cdoes not know about it, so what does one do?\u201d<\/p>\n

\"A
A police officer uses his phone as he sits outside a market at Majnu Ka Tila, a Tibetan refugee camp, before the BRICS summit in New Delhi, India, on September 11, 2026 [Bhawika Chhabra\/Reuters]<\/figcaption><\/figure>\n

\u2018Friction for surveillance\u2019?<\/h2>\n

The central legal gap identified by digital rights group IFF is that India has no statute or protocol that specifically authorises or regulates the forced unlocking and full extraction of data from a mobile phone seized by law enforcement agencies.<\/p>\n

Existing seizure powers under criminal law do not explicitly address bypassing passcodes, copying an entire file system, harvesting login tokens to access cloud accounts or establishing rules for the retention and deletion of extracted data.<\/p>\n

The Supreme Court in a 2017 judgement recognised privacy as a fundamental right under the Indian Constitution. The judgement established that any state intrusion into privacy must have a legal basis, pursue a legitimate state aim and be proportionate to that aim.<\/p>\n

Bhandari told Al Jazeera that when the government agencies \u201cdeploy these capabilities without any proper meaningful oversight, the net of surveillance is cast wider and deeper and a lot more people are affected without either legislative, parliamentary or judicial oversight\u201d.<\/p>\n

Bhandari noted that while some countries like the United Kingdom or Germany \u201chave some element of either parliamentary oversight or judicial oversight, India only has an internal review mechanism in executive oversight\u201d.<\/p>\n

\u201cThe whole point of having any oversight is to create a friction for surveillance,\u201d she said, \u201cso that it\u2019s not easy for the government to just target everybody.\u201d<\/p>\n

\u201cThe current legal framework fails in this safeguard,\u201d Bhandari said.<\/p>\n<\/div>\n\n

\n
\n \n
\n \n \"Happy\"\n <\/a>\n
\n Happy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sad\"\n <\/a>\n
\n Sad <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Excited\"\n <\/a>\n
\n Excited <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sleepy\"\n <\/a>\n
\n Sleepy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Angry\"\n <\/a>\n
Angry<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n \n <\/div>\n <\/div>\n\n
\n \n \"Surprise\"\n <\/a>\n
Surprise<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n\n ","protected":false},"excerpt":{"rendered":"

New Delhi, India \u2013 India has exempted an Israeli phone-hacking company from New Delhi\u2019s own rules, allowing it to sell phone-extraction products and surveillance technology to government agencies and sparking concerns and criticism from rights groups and activists. An investigation by the digital-rights group Internet Freedom Foundation (IFF) found Indian Home Minister Amit Shah, a…<\/p>\n","protected":false},"author":1,"featured_media":15693,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_2277560469115098_106292521332774":"","twitter_aToxNzczMzI3Njk4OTg4ODUxMjAxOw==_1773327698988851200":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","_monsterinsights_skip_tracking":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"categories":[11],"tags":[],"class_list":["post-15692","post","type-post","status-publish","format-standard","has-post-thumbnail","category-international-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t