[flavoral]

Daniel Gericke, the CIO of ExpressVPN along with other US intelligence operatives have been fined with $1.6 million for helping UAE in their Hacking/Spy project "Project Raven" by selling Exploits and Tools to them.

The chief information officer of a leading virtual private network is among three former US intelligence and military personnel who altogether have been fined more than $1.6 million by the US Department of Justice to resolve hacking-related charges. ExpressVPN CIO Daniel Gericke, as first reported Tuesday by Reuters, is among the three former US intelligence operatives and military members involved in Project Raven who worked as mercenary hackers for the United Arab Emirates, helping it spy on its enemies. ExpressVPN said its trust in Gericke "remains strong."

The three defendants have agreed to cooperate with US authorities and pay the fine in exchange for deferred prosecution, according to a Justice Department release. The three have also forfeited foreign and US security clearances and face future employment restrictions. The agreement comes a day after ExpressVPN announced it had been sold as part of a $936 million deal to former adware distributors Kape Technologies, a company co-founded by an ex-Israeli surveillance agent and a billionaire previously convicted of insider trading.

Source: https://www.cnet.com/tech/services-and-s...ect-raven/

According to court documents, the defendants worked as senior managers at a United Arab Emirates (U.A.E.)-based company (U.A.E. CO) that supported and carried out computer network exploitation (CNE) operations (i.e., “hacking”) for the benefit of the U.A.E government between 2016 and 2019. Despite being informed on several occasions that their work for U.A.E. CO, under the International Traffic in Arms Regulations (ITAR), constituted a “defense service” requiring a license from the State Department’s Directorate of Defense Trade Controls (DDTC), the defendants proceeded to provide such services without a license.

These services included the provision of support, direction and supervision in the creation of sophisticated “zero-click” computer hacking and intelligence gathering systems – i.e., one that could compromise a device without any action by the target. U.A.E. CO employees whose activities were supervised by and known to the defendants thereafter leveraged these zero-click exploits to illegally obtain and use access credentials for online accounts issued by U.S. companies, and to obtain unauthorized access to computers, like mobile phones, around the world, including in the United States.

Source: https://www.justice.gov/opa/pr/three-for...68-million

[demondx]

Woah didn’t know that. Very insightful man

[Achraf-Hakimi]

Will never use this service again, time to look for alternative.

[Haaks]

Never using that vpn again. Nice thread btw :)

[The Pact]

Project Raven has been used to track down journalists who said anything bad about TikTok.

[youdigitalzdotcom]

I saw this info in late 2021 on reddit that Express VPN is working with UAE to spy on users. As a matter off act, it was revealed that UAE arrested a guy or so for watching porn with VPN and i wondered how is that even possible. So this news unveils it all

[Joshua Davis]

Wow, way to go ExpressVPN. I've never used it and will encourage people not to now that i've discovered this.

[SIM-3221368]

All these companies ever get is fined they should get booted out of the industry. Is this what unregulated capitalisms looks like?

[banonkiel]

FYI:
Every VPN provider (even those that advertise no-logging) keep logs.

At the very least, logs of when you connected, how long you stayed connected. You can find articles about VPN companies helping the government when needed to arrest people.
so hypothetically, if you plan to hack NASA while using a "VPN" because they won't track you back, reconsider.

On topic

I wonder if they were only fined or someone got some jail time, because apparently the privacy of their clients doesn't mean much.

[Social Engineer]

Corporations get fined.
Individuals get f**ked.