A recent cyberattack has exposed sensitive data from a Russian telecommunications company known for creating systems that enable web surveillance and censorship across the globe.
Protei, founded in Russia and currently based in Jordan, was hacked, resulting in the defacement of its website and the theft of significant amounts of data.
International Presence and Products
Protei supplies technology to phone and internet providers in several nations, including Bahrain, Italy
Protei supplies technology to phone and internet providers in several countries, including Bahrain, Italy, Kazakhstan, Mexico, Pakistan, and regions of central Africa.
The company's offerings include video conferencing tools, internet connectivity solutions, and equipment for surveillance and web filtering, such as deep packet inspection systems.
Details of the Breach
While the exact timeline and method of the hack remain unclear, a snapshot from the Internet Archive’s Wayback Machine indicates the website was altered on November 8, with normal operations restored shortly after.
Hackers extracted approximately 182 gigabytes of files, including emails spanning several years.
Data Shared with Transparency Collective
The pilfered data was subsequently transferred to DDoSecrets, a nonprofit organization focused on transparency by indexing leaked data deemed of public interest.
This includes information related to law enforcement, government bodies, and companies within the surveillance industry.
Lack of Response from Protei
Mohammad Jalal, Managing Director of Protei's Jordan branch, did not respond to requests for comments regarding this security breach.
The identity and motives of the hacker remain unknown, but the website’s homepage displayed the message: 'another DPI/SORM provider bites the dust', hinting at their disapproval of the company's involvement in deep packet inspection systems and SORM.
Surveillance Technology and SORM
Protei's deep packet inspection devices allow telecom firms to manage web traffic differently
SORM, a lawful intercept system devised in Russia, is operational in numerous regions that utilize Russian technology. It requires telecom operators to install equipment enabling government access to communications data, such as calls and text messages.
Protei's deep packet inspection devices allow telecom firms to manage web traffic differently based on its source, facilitating both surveillance and censorship in areas where expression is limited.
Protei's Involvement in Iran
In 2023, The Citizen Lab disclosed that Protei had interacted with Iranian telecommunications giant - Ariantel concerning technology used for monitoring internet traffic and restricting access to selected websites.
Documents released by The Citizen Lab illustrate that Protei claimed their technology can block access to certain sites for targeted individuals or large population segments.
