Russia managed to use Cellebrite hacking software to extract data from the iPhone of an imprisoned activist, despite the company claiming it had cut off sales in the country months earlier. This case reveals that trade restrictions alone do not prevent security technologies from ending up in the hands of authoritarian governments, turning tools designed for legitimate investigations into instruments of repression.
The technical gap between sale and end use 🔍
The leak indicates that the software reached Russia through intermediaries or unofficial channels, something Cellebrite could not track. Technically, these forensic tools exploit vulnerabilities in the iOS system to access messages, contacts, and encrypted data. Without end-use verification mechanisms or dynamic licenses requiring periodic connection to authorized servers, the software can run unchecked once installed on local equipment, as happened in this case.
The lock that opens all doors… except its own 🧀
Cellebrite promises digital security, but its own sales lock seems to have more holes than Swiss cheese. While the company claimed to have shut off the tap to Russia, someone found the hose connected elsewhere. Perhaps the next model will include a good-conduct-only countries mode, though, given what happened, they better not advertise it too loudly.