The Government defends speed limit spending, the move that could mark the end of North Island skiing, and a date for the coronation of our new King in the latest NZ Herald headlines. Video / NZ Herald
This is the first of two RNZ stories looking at surveillance firm Cobwebs Technologies' work for the New Zealand government.
The government is working with an Israeli-born surveillance firm named among a group of "cyber mercenaries" and kicked off Facebook for spying onpeople.
It is keeping most of the operations with Cobwebs Technologies secret, but they include Immigration NZ.
Cobwebs is among seven foreign companies accused in late 2021 by tech giant Meta of setting up fake accounts to spy on almost 50,000 people, including journalists, human rights activists, politicians and others in more than 100 countries.
Meta, formerly Facebook, reported it had identified "customers" of Cobwebs in at least seven countries including New Zealand.
"In addition to collecting information about their targets, the accounts used by Cobwebs' customers also engaged in social engineering to join closed communities and forums and trick people into revealing personal information," its report claimed.
RNZ is reporting this aspect of the 10-month-old investigation for the first time, after forcing officials here to release information about their own dealings with Cobwebs for the first time, by appealing to the Ombudsman.
Meta said in late 2021 it had removed about 200 accounts operated by Cobwebs and its customers worldwide.
The OIA documents released this week show Immigration NZ has been a customer of Cobwebs for about two years.
Immigration NZ required the firm to be able to covertly collect data including people's "political information" and "religious preference", the documents show.
It also has to be able to collect banking, health and family relationships information for Immigration.
Zeroing in
Cobwebs scours publicly-available social media platforms, including Twitter, Facebook, Instagram, Reddit, Tumblr, LinkedIn, Snapchat and WhatsApp.
To get the contract, it was required by Immigration NZ to leave no trace behind and totally protect analysts' identities.
Cobwebs is among seven foreign companies accused by tech giant Meta of setting up fake accounts to spy on almost 50,000 people, including journalists, human rights activists, politicians. Photo / File
RNZ understands police have trained with Immigration on Cobwebs tools.
Cobwebs, set up in 2015 by ex-Israeli defence special forces members, and now based in New York, was placed first last year in a Silicon Valley ranking for its surveillance power.
RNZ has approached the firm for comment.
The "tools" it uses for Immigration NZ automatically raise alerts about key words or phrases from publically-available Internet sites, and can zero-in on "country/region targets", the business case said.
The Ministry of Business, Innovation and Employment said the Cobwebs operations were legal, closely controlled and vital.
They helped it meet its "legislative responsibilities", in an undefined but "specific" area where there were active threats, the ministry told RNZ in its OIA response.
Revealing more would "enable and embolden" groups overseas seeking to undermine it.
"We are aware of activity overseas showing an intent (and ability) of such groups to do exactly this, specifically in response to the public release of information of the kind we are withholding, including tactically altering their behaviour, increasing their operational security or deliberately injecting misinformation to reduce the effectiveness of collection methods.
"If even a moderate event in this particular area were to eventuate, the consequences for New Zealand could be significant and costly to fix," MBIE said.
'Surveillance for hire'
Cobwebs' work is the latest example to come to light in the public sector of an approach known overseas as "surveillance for hire".
Others include New Zealand Police accessing private CCTV camera footage; and Internal Affairs setting up a master agreement to hire facial recognition services.
Meta in its investigation into spyware makers claimed Cobwebs activates counterfeit accounts for its clients that conduct surveillance online.
"In addition to targeting related to law enforcement activities, we also observed frequent targeting of activists, opposition politicians and government officials in Hong Kong and Mexico," Meta said.
Google in July called for a US government ban on using "surveillance-for-hire" services.
Last December, Cobwebs launched new technology targeted directly at the public sector.
It claims to have identified terrorists and promotes its ability to combat the "global problem" of social unrest, by "identifying threat actors known for instigating social unrest and to pinpoint hotspots in real-time to prevent escalations".
One of the documents, the business case, shows Cobwebs stores the data.
It sends the data to analysts in the small, little-known MBIE Intelligence Unit (MIU), which advertises jobs that "contribute to the National Security System".
The MIU also works with "domestic and international agencies on law enforcement and regulatory issues", the job ad said.
The data from Cobwebs might be shared with the government's border partners, the second document, a privacy impact assessment, said.
It might also be shared with other domestic government agencies if the MIU had a "reasonable belief and lawful basis" for doing this.
RNZ has asked the ministry if it had concerns about the controversy overseas, or if it has sought assurance from Cobwebs about the use of fake accounts.
The ministry said it had people off sick so any response has been delayed.
A world-first Kiwi-developed food technology that upcycles horticultural waste into high-value products is set to reduce NZ’s dependence on imported food ingredients.
