Citizen Lab Reports Russian Use of Cellebrite UFED on Activist’s Phone After Contract Cancellation
Summary
Citizen Lab found evidence that Russian authorities used Cellebrite UFED to access Andrey Pivovarov’s phone in 2021, despite contract cancellation. Researchers suspect the data may have aided later dissident surveillance; Cellebrite disputes the effectiveness of legacy,
Key points
- Citizen Lab found evidence that Russian authorities accessed Andrey Pivovarov’s phone around June 2021 while it was in government custody.
- The investigation, which included court documents provided by Pivovarov, indicates Cellebrite’s UFED forensic technology was used.
- Researchers suspect information from the phone may have aided later surveillance of dissident Anastasiya Burakova in a campaign linked to Russia’s FSB.
- Citizen Lab says UFED’s legacy architecture and offline mode may have allowed functionality to continue after updates or contract support ceased.
- Cellebrite says use of legacy hardware in Russia after March 2021 was unauthorized and that the technology is now incompatible with modern devices and ineffective.
Article Details
- Event Type
- Reported state surveillance using mobile-device forensic technology
- Impact
- Citizen Lab found evidence that Russian authorities accessed human rights activist Andrey Pivovarov’s phone around June 2021 using Cellebrite’s UFED technology, after his arrest. Researchers said information from the phone may have aided later surveillance of other dissidents, including Anastasiya Burakova, in a hacking campaign linked to the FSB. Cellebrite said use of legacy hardware in Russia after March 2021 was unauthorized and that the technology would be ineffective today.
People
Anastasiya BurakovaDissident reportedly targeted in a later hacking campaign; researchers said information from Pivovarov’s phone may have aided the surveillance.Andrey PivovarovHuman rights activist whose phone Citizen Lab found evidence Russian authorities accessed around June 2021.Victor CooperCellebrite spokesperson who said use of the company’s legacy hardware in Russia after March 2021 was unauthorized and that it would be ineffective today.