iiinova — where your digital self keeps evolving

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

9/ But Russian civil society knew all long this was a complete ruse! Official Russian legal entities registry shows that the Russian company MKO Systems and Oxygen Software are the same company!

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

8/ The cover-up started after Russia's 2022 full scale invasion of Ukraine: – installed a US CEO – renamed the Russian company (from Oxygen to MKO-Systems) – wiped the Russian owners from US filings – moved builds to US cloud (while the code stayed in Russia)

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

7/ Oxygen is the machinery behind human rights abuses in Russia. Anti-war posts, donations to Ukraine, criticism of Russian government are pulled from peoples' phones at a protest or border with Oxygen tools and turned into criminal charges & long prison terms.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

6/ First Department documented how Russian security services use Oxygen tech (Mobile Criminalist) to pull EVERYTHING out of seized phones — logins, passwords, private chats, social media posts, photos, and more. It's installed at border crossings & available to every security agency.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

5/ Inside Russia, the SAME product is sold as "Мобильный криминалист" (Mobile Criminalist) — same code, different label. First Department (Первый Отдел) showed it's basically a localized copy of Oxygen's software. By 2025 it was the #1 phone-hacking tool on the Russian market.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

4/ Oxygen sold its tech to the Pentagon, ICE, FBI, DEA, DHS & the State Dept, among others. And who else used this company's software? The FSB. Also Russia's Investigative Committee & Ministry of Internal Affairs. The same outfit was selling to US law enforcement AND Russian intelligence!

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

3/ Prosecutors say Oxygen told the US government it had ZERO foreign ownership and that its software was developed in the US. In reality: owned and controlled by 5 Russian nationals through a Cyprus holding. Code written, reviewed, and managed in Russia!

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

2/ Oxygen's US CEO, Lee Reiber, was arrested Sunday in Idaho. The Moscow-based CTO, Oleg Davydov, was also picked up at Heathrow trying to board a flight to Turkey. He will be extradited to the US. Both are charged with conspiracy to commit wire fraud & face up to 20 years in prison.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/09/2026

🚨 BREAKING: U.S. DOJ arrested the CEO of Oxygen Forensics, Lee Reiber, for concealing the company's Russian ownership. Civil society, including First Department, @olgalautman.bsky.social, & myself, have been sounding alarms for years about this company! 1/ www.justice.gov/usao-cdca/pr...

1105

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 06/07/2026

4/ 2+ years on: NO government has claimed responsibility. NO ONE has been held accountable. And now we learn about another victim — a then-sitting MEP investigating EU spyware scandals! This suggests that the full scale of the abuse is likely far bigger than we thought.

121

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 06/07/2026

3/ The victims included @rferl.org.web.brid.gy & Nobel Prize-awarded media @novayagazeta.bsky.social journalists. We didn't name the perpetrator at the time. But we excluded Russia, Belarus, and Poland, among others.

121

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 06/07/2026

2/ In 2023-2024, @accessnow.org and @citizenlab.ca published two investigations uncovering Pegasus attacks on Russian & Belarusian civil society figures living in the Baltics and Poland. Several victims were hacked from the same email account: rauharepo888[@]gmail.com

132

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 06/07/2026

Former MEP was hacked by the same gov behind the Pegasus attacks we exposed 2 years ago! @citizenlab.ca revealed that Stelios Kouloglou, former EU PEGA Committee member, was targeted by the same operator that hacked several Russian- & Belarusian-speaking journalists + activists living in EU 🧵1/

196

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

9/ Read full @citizenlab.ca report & key security recommendations here: citizenlab.ca/research/rus... Civil society can also contact our Helpline at help@accessnow.org for digital security support.

020

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

7/ Furthermore, Cellebrite must explain why it repeatedly enters into contracts with countries notorious for human rights abuses, including Belarus, China, Saudi Arabia, Philippines, Ethiopia & more. Belarus was a dictatorship for 20+ years before Cellebrite's 2021 exit.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

6/ While we welcome Cellebrite’s exit from Russia, this evidence casts serious doubt on the company’s claims that withdrawal makes their technology "ineffective within a short period of time" as stated in their reply to our joint letter with the Citizen Lab.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

5/ These are not just hypothetical harms. In 2023, Cellebrite tool helped convict anti-war activist Dmitry Ivanov to 8.5 years. Pivovarov served most of his 4-year sentence. FSB also targeted other Open Russia activists with phishing after searching their communications on Pivovarov’s phone.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

4/ @haaretzcom.bsky.social, Eitay Mack, @en.zona.media & First Department have documented multiple cases (backed by the Russian authorities' own documents) showing that UFEDs were still used against human rights defenders & anti-war protesters YEARS after the company's alleged exit.

130

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

3/ While Cellebrite claimed it had ended the sales to Russia "immediately" and asserted that it could remotely disable devices to prevent future misuse, the evidence from independent media and lawyers tells a different story...

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

2/ In March 2021, Cellebrite announced it had ceased operations in Russia after lawyer Eitay Mack & @haaretzcom.bsky.social revealed that the UFED tools were being used by Russian Investigative Committee to prosecute opposition figures, including Lyubov Sobol & Pussy Riot.

110

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 25/06/2026

BREAKING: @citizenlab.ca investigation reveals Russian security services used @cellebrite.bsky.social tools to hack the phone of a prominent former political prisoner Andrey Pivovarov. More on why this is concerning below 🧵1/ citizenlab.ca/research/rus...

121

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/02/2026

Today marks the 4th anniversary of Russia’s full scale invasion of Ukraine 🕯️ Russia has not only killed & maimed thousands of Ukrainians but also persecuted 4000+ of ppl in Russia & occupied Ukraine for daring to oppose the war

Russia is persecuting more than 4,000 people in politically motivated cases related to the war, Memorial reports

The Insider
24 February 2026

020

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/02/2026

2 years ago, friends from the First Department published their investigation into Russian spy company #Oxygen used by US & European law enforcement. Glad to see @olgalautman.bsky.social digging into it as well. This company is a major human rights & national security threat youtu.be/Ib4jFJrrgu8

16026

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 27/01/2026

New security feature released by WhatsApp to further protect high risk users from spyware 🙌 For some, this can be truly life saving! More companies should be adding such features to their platforms and devices. By @cyberscoop.bsky.social @timstarks.bsky.social cyberscoop.com/whatsapp-str...

046

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 12/11/2025

Fantastic News! 📢 U.S. court rejects all of NSO's objections to permanent injunction! The ruling bans NSO from accessing WhatsApp platform & orders NSO to delete all technologies that use, access, or depend on WhatsApp. This basically outlaws Pegasus in its current form🚫

042

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 03/11/2025

It was a pleasure to speak at #InternetCA ‘25 together with regional partners & Kazakhstan🇰🇿& Kyrgyzstan🇰🇬 officials. I highlighted the disproportionality of internet shutdowns 🛜, the dangers of “white lists” ☑️‼️& the importance of protecting e2e encryption🔒 🙏 to MediaNET for the invitation

020

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 18/10/2025

Today’s WhatsApp v NSO injunction is a BIG DEAL & may essentially kill Pegasus spyware *as we know it.* To comply, NSO would have to ensure that their spyware cannot access WhatsApp messages or break WhatsApp’s encryption. This means that NSO can no longer offer “unlimited” access to victims’ 📱s

38224

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 13/10/2025

3/ The donation announcement is the latest in the string of innovative and highly effective (I would even say life saving!) features introduced by Apple to protect its most vulnerable users from spyware attacks like Pegasus. Other companies should follow suit!

020

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 13/10/2025

2/ We in civil society have identified the problem of many high risk users targeted w/spyware not being able to afford devices with the latest & strongest security features, especially when many orgs are facing funding cuts. Apple’s announcement responds to this need! cyberscoop.com/apple-memory...

120

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 13/10/2025

Great News! 👏 Apple announced they will be donating 1000 iPhone 17s with the much more secure Memory Integrity Enforcement to high-risk users! Another meaningful step that Apple is taking to protect journalists, activists & dissidents from commercial spyware! 1/ security.apple.com/blog/apple-s...

161

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 22/07/2025

⚖️ An important ECtHR ruling that some may have missed: The Court ruled that Russia breached Free Expression rights by imposing excessive fines on Google for failure to remove YouTube channels & videos critical of the gov + suspending sanctioned pro-gov Tsargrad TV accounts

ECtHR Press Release: Fines and penalties against Google breached its free-expression rights

121

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 16/04/2025

In the latest blow to #NSO in the WhatsApp case, the judge ruled that NSO can't argue at trial that their clients used Pegasus to investigate terrorism & other crimes while also not disclosing anything about these clients & their investigations. NSO can't eat their cake & have it too!

061

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 22/03/2025

This is going beyond even what autocracies like Russia are doing www.whitehouse.gov/presidential...

295

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 01/03/2025

Zelensky is not a “perfect” president (no one is), but the fact that he has bravely stayed with his people during Russia’s full scale invasion & has been fighting for Ukraine’s freedom against all odds for 3 years deserves huge respect. NOT whatever this was…

152

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 24/02/2025

Today was the 3rd anniversary of Russia’s full scale invasion of Ukraine. While somehow it became “fashionable” to forget, diminish & dismiss the suffering & sacrifices of the Ukrainian people, as a Russian-American and as a human being, I stand with Ukraine 🇺🇦

050

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 22/02/2025

Excited to welcome everyone at #RightsCon2025 in Taipei this coming week! Check out some of my sessions held online and in person

063

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 01/02/2025

The WhatsApp #Paragon story just gets worse! The first known victim of this spyware is an Italian news editor who published a major exposé last year about members of Meloni’s far-right party’s youth wing engaging in “fascist chants, Nazi salutes, and antisemitic rants.”

141

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 31/01/2025

NEW: WhatsApp notifies civil society victims that they were targeted with #Paragon spyware. This highlights the fundamental problem with the commercial spyware industry being unable to police itself. We need regulation and accountability now! www.theguardian.com/technology/2...

161

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 29/01/2025

Human rights orgs & independent media that risk their lives defending human rights & democracy are currently in a “survival mode” due to Trump’s Stop Order. Some may not survive. Funders who are not affected by this - now is your time to step forward & offer emergency assistance.

130

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 23/01/2025

UPDATE: The date of the WhatsApp v NSO trial on damages has been pushed to April 28, 2025 due to California wildfires.

020

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

8/ The wheels of justice are slow, but the period of impunity for spyware purveyors & abusers is winding down & I believe they will face justice for undermining our security & human rights. Read more by @suzannesmalley.bsky.social from @therecordmedia.bsky.social therecord.media/judge-rules-...

1211

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

7/ We at Access Now & partners w/help from Farella Brown submitted amicus brief during the appeal stage. Our brief featured testimonies of courageous #Pegasus targets from #Morocco, #India, #Rwanda & #Togo This win also belongs to them & other victims www.accessnow.org/press-releas...

2151

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

5/ Since the court found NSO liable, all that remains to be decided at trial is how much should NSO pay to WhatsApp - the damages. The WhatsApp v NSO Jury Trial is scheduled to begin on March 3, 2025 at 8:30am in Oakland, CA. This will be a case to watch!

1184

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

4/ Third, the court ruled that NSO breached the contract with WhatsApp by violating Terms of Service. WhatsApp’s ToS prohibit, among other things, sending harmful code, collecting users' info & using the app for illegal purposes. Which is exactly what NSO did through Pegasus hacking!

1150

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

3/ Second, the court found that NSO violated CDAFA. It is similar to #CFAA but requires that defendant specifically targets California servers. As NSO failed to provide Pegasus source code relevant to establishing this claim, the court ruled in favor of WhatsApp as an evidentiary sanction.

181

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

2/ First, the court ruled that NSO violated the Computer Fraud & Abuse Act #CFAA by sending messages through WhatsApp servers to hack users with Pegasus. NSO argued that because they had WhatsApp accounts, they were authorized to use them as they wanted (incl. hacking). Court did not buy it

1180

Natalia Krapiva 🕊️👩🏻‍💻 @natynettle.bsky.social · 21/12/2024

The court just handed WhatsApp a major win in the case against NSO Group ⚖️ 🎉 NSO was found liable under federal #CFAA & state law for #Pegasus hacking through WhatsApp's servers. As a lawyer working on surveillance, let me break down the ruling 🧵 1/ storage.courtlistener.com/recap/gov.us...

211953