TechCrunch published a July 25 profile of Phineas Fisher, the still-unidentified hacker behind major spyware leaks.
Why it matters: Fisher's leaks helped expose the mercenary spyware market to scrutiny from governments, customers and security researchers. The profile also underscores how politically motivated hacks can still create reputational and operational risk for surveillance vendors.
- TechCrunch published the profile on July 25 as part of its cybersecurity-mysteries series.
- Fisher first surfaced in August 2014 after claiming responsibility for a hack of Gamma Group, maker of FinFisher spyware.
- In July 2015, Fisher hacked Hacking Team and released about 400GB of data, including source code, emails, contracts and customer lists.
- TechCrunch reports Fisher later hacked the Catalonia police union, the Turkish ruling party and Cayman National Bank's Isle of Man branch.
TechCrunch's latest profile revisits Phineas Fisher, the hacker who has never been publicly identified and who became known for breaches that exposed spyware vendors and their customers.
Fisher first emerged in August 2014 after claiming responsibility for a hack of Gamma Group, the company behind FinFisher spyware. The profile says the leak was publicized through an @GammaGroupPR Twitter account. Citizen Lab has documented FinFisher's marketing to law-enforcement and intelligence agencies and has tied the software to spyware use against activists and dissidents in Bahrain and elsewhere.
In July 2015, Fisher hacked Hacking Team and released roughly 400GB of material, including source code, internal emails, contracts and customer lists. Reuters reported that the company said the leak could allow anyone to deploy its software against targets, while Citizen Lab said the material revealed government customers in multiple countries and exposed the broader spyware market.
TechCrunch says Fisher later hacked the Catalonia police union, the Turkish ruling party and Cayman National Bank's Isle of Man branch. The profile says the bank hack was initially kept quiet and later acknowledged in a "Hacktivist Bug Bounty Program" announcement.
TechCrunch also reports Fisher has stayed out of public view, has deleted public accounts and remains unidentified despite contact with the reporter in recent years. The profile ends with that unresolved identity question still open.
By the numbers
- 400GB - Approximate size of the Hacking Team data set Fisher released in 2015.
- August 2014 - When Fisher first surfaced after claiming the Gamma Group hack.
- July 2015 - When Fisher hacked Hacking Team and leaked its material.