See feature article below: Ability Inc. (NASDAQ: ABIL)
About Broad Street Alerts:
Big opportunities in Small Caps
Broad Street Alerts recent profiles and track record, 568% in verifiable potential gains for our members on 2 recent small cap alerts alone!
May 9th, 2016-(NYSE-MKT: MGT) opened at .64/share and hit over $4.15/share within 8 days for potential gains of 548% for our members.
May 23rd, 2016 (NYSE-MKT: XXII) opened at $.78/share and hit $.94/share within 2 days for potential gains of 20% for our members.
***Get our small cap profiles, special situation and watch alerts in real time. We are now offering our VIP SMS/text alert service for free, simply text the word “Alerts” to the phone number 25827 from your cell phone.
Report For: Ability Inc. (NASDAQ: ABIL)
ABIL provides interception, geolocation, and cyber intelligence tools for security and intelligence agencies, military forces, law enforcement agencies, and homeland security agencies. Shares of ABIL are up 18% today at $3.35 with trading volume double the daily average.
With just a few million dollars and a phone number, you can snoop on any call or text that phone makes – no matter where you are or where the device is located.
That’s the bold claim of Israel’s Ability Inc, which offers its set of bleeding-edge spy tools to governments the world over. And it’s plotting to flog its kit to American cops in the coming months.
Unlimited spying
Ability’s most startling product, from both technical and price perspectives, is the Unlimited Interception System (ULIN). Launched in November last year, it can cost as much as $20 million, depending on how many targets the customer wants to surveil. All a ULIN customer requires is the target’s phone number or the IMSI (International Mobile Subscriber Identity), the unique identifier for an individual mobile device. Got those? Then boom – you can spy on a target’s location, calls and texts.
This capability is far more advanced than that of IMSI-catchers (widely known as StingRays), currently used by police departments in the United States. IMSI-catchers can help acquire a target’s IMSI number, as well as snoop on mobiles, but only if the target is within range.
ULIN has no such geographic limitation. A quarterly update document posted only on May 2, spells out the tech’s power: “ULIN enables interception of voice calls, SMS messages and call-related information of GSM/UMTS/LTE phones, without the need to be close to the intercepted phone and without the consent of mobile network operators [emphasis by FORBES] and requires only the mobile device’s phone number or IMSI. Customers can use ULIN to intercept calls, and gather other information, from anywhere in the world.”
Ability’s tool exploits a weakness resident in SS7, the Signalling System No. 7. A core part of the world’s shared networking infrastructure, SS7 helps route calls between different carriers and switching centers. Service providers often use SS7 to support communications in areas where the customer’s normal network isn’t available, such as when the user is abroad. For instance, when a Verizon user is holidaying in Spain, local carriers will use SS7 to “speak” with the customer’s operator to determine who provides its service.
Hackers, however, use weaknesses in the SS7 network for a number of nefarious purposes. For instance, to forward calls heading to voicemail to their own devices. They can do this because wireless networks do not have the necessary safeguards to block these attacks. Concerns around SS7 have led House Democrat Ted Lieu to demand a Congressional investigation and the Federal Communications Commission has launched its own probe.
Previously, government contractors selling SS7 exploitation tools had to work with wireless service providers to access the SS7 network. These tools, according to a Washington Post report in 2014, were only able to detect users’ locations, not intercept communication. Ability, however, can do much more.
According to documents seen by FORBES, one of which was leaked by an anonymous source (published below and on Document Cloud), Ability’s ULIN service allows it to locate targets and snoop on calls and texts – without any assistance from the cellular networks. According to whitehat hacker Drew Porter from security consultancy Red Mesa, this is technically feasible, and could be done in two ways: by hacking the SS7 network or by leasing a system from a carrier that has the ability to “talk” to large parts of the network.
Porter noted the first option is “preferred because you really don’t need any carrier cooperation.” The second would require some kind of contract, which would be “less ideal,” he added, as it may allow interested parties to trace the interception back to the true spy or surveillance vendor. Ability could also have built its own infrastructure that can send messages across the network.
Regardless of how Ability is able to spy on mobiles over SS7, it has its hands on a powerful product. Direct hacks on mobile devices typically require the use of malware and exploitation of software vulnerabilities – themselves a costly commodity – and run the risk of detection. Accessing a mobile device through SS7, however, can provide access to much of the same information with little danger of detection by the target.
“Having access to SS7 is really a golden key of surveillance, I’m not surprised [Ability] capitalized on it,” said Claudio Guarnieri, a security and human rights advocate who this week helped launch a map of attacks on journalists and activists, as well as the surveillance vendors facilitating global spying. He plans to add Ability to the map this week.
Karsten Nohl, a German whitehat hacker from Security Research Labs who has frequently highlighted security shortcomings in SS7, said the intercept capabilities that SS7 provides “are probably the most powerful currently available.”
For privacy activists, this is a real concern. “Our devices, services and national and international communications infrastructure should be safe and not betray us in this manner,” said Privacy International technologist Dr. Richard Tynan. “This is particularly concerning as most countries’ laws discriminate against foreigners and provide a lower standard of protection when it comes to surveillance. Any country that purchases or makes surveillance equipment must be aware that their citizens are also vulnerable to the very same kit used by someone else; yet they seem to choose their offensive capabilities over our safety time and time again without any apparent mandate from the public for doing so.”
SS7 exploit services have created anxieties around a lack of oversight over their use. Until last year, cops in the United States used Stingrays without warrants. Following complaints from civil rights bodies, the Department of Justice mandated warrants, but the invasive tool had already been deployed and the damage done.
The same could happen with tools like ULIN, warned Nathan Wessler, staff attorney at the American Civil Liberties Union. “This system means that law enforcement will have the ability to conduct wiretaps and location tracking without anybody scrutinising what they’re doing, and nobody may have the opportunity to push back and demand appropriate legal process,” Wessler told FORBES.
While U.S. law enforcement officers are able to get phone records from carriers with the right warrant, the Ability service means they don’t need to get such permission, he added. “There is a significance to cutting the phone companies out of that transaction, because it makes it trivially easy to totally bypass the legal protections that are required under the U.S. Constitution and federal law.”
American cops may soon be paying big bucks for Ability’s tech. The Israeli company is planning a significant expansion in America this year and is currently looking for a partner to help it sell to U.S. law enforcement, says Ability’s CEO, Anatoly Hurgin, who I spoke with as he was driving to his office in Tel Aviv on Thursday morning and later that afternoon from his company HQ.
“You cannot just ignore such a huge market. It’s about half of the world market for our kind of technology,” he said. An SEC filing detailing Ability’s merger with Cambridge Capital Acquisition Corporation, which helped the Israeli company go public, indicates the market is indeed blowing up; the U.S. lawful intercept industry worth $3.8 billion in 2015 is expected to hit $6.3 billion in 2020. That same document valued Ability at $225 million, though it’s current market cap is down at $71.1M.
Hurgin’s tools may allow for easy snooping on others, but he told me he cares about his own privacy. There’s very little public information about him. His LinkedIn profile reveals nothing beyond his position at Ability. His Google+ and Skype avatars show a thin man, grey hair, sunglasses. Hurgin says he started Ability with its equally enigmatic Russian co-founder Alexander Aurovsky after a long stint in the Israeli Defense Forces, but he won’t tell me what division. He says it wasn’t the noted Unit 8200 or Shin Bet. “I started as an electronic engineer,” is all he says.
Though predictably guarded, he did let slip some more details about ULIN. He says the tool can sell for anywhere between $5 million and $20 million, as confirmed in the quarterly update. The price depends on where a suspect is based and how many targets a customer wants to snoop on. Those targets can be based anywhere in the world, he says, indicating widespread access to the SS7 network. He declined to tell me how the firm accesses the SS7 network without going through operators, only noting Ability uses “every possible way.”
“ULIN, being combined with other cyber solutions, will open a new era in data interception. What you can do today with Wi-Fi interception systems from distance less than 100m, you will be able to do without distance limitation at all,” he added over a Skype message sent after our conversation.
Despite the bold claims, Ability’s tool may not be as “unlimited” as advertised. Kohl notes that some operators have already deployed firewalls that prevent SS7 attacks. Many more will do so this year, he claimed, noting he is helping a handful of unnamed operators set up those firewalls. “SS7 firewalls block messages types that are clearly abusive and also some other possibly abusive messages from strange senders. A few firewall rules go a long way to solve 90 per cent of the SS7 security issue.”
Is Hurgin concerned about his pricey product becoming obsolete? “This concern does exist. But talking about [fixing the networks] and doing something are different things.”
And while $20 million might seem like a high price, Porter believes it’s more than reasonable. “I have not seen a system with a more polished user interface as theirs,” he added, after reviewing the ULIN manual obtained by FORBES. “At $20 million, to locate and intercept almost anyone’s cell phone seems like good deal to me.”
Ability shares tank
Thanks to all that expensive surveillance gadgetry, Hurgin’s company, founded in 1994, has posted some positive financials. This month, it claimed revenue growth of 143 per cent from 2014 to 2015, with overall revenue hitting $52.2 million. Overall net income was $14.8 million, compared to $3.1 million in 2014. It benefited from a $6.1 million deal with an unnamed intelligence agency in Asia made sometime in 2015. Other recent customers include a prison authority in Latin America and an intelligence agency in a Nato member country.
But this month, the company suddenly found itself under threat of legal action from its own investors. Having started trading publicly on the Nasdaq in December, Ability had a steady start, but in May shares started tanking. Though Hurgin put a positive spin on profits, they masked a glaring issue: Ability had been compelled to restate its results for 2015, 2014, 2013 and 2012 as it had failed to report money owed to an unnamed third-party vendor across two of those years and had improperly reported allocation and timing of revenue.
On May 2, the day it announced those errors, the price of Ability’s common stock fell 33 per cent to close at $4.90 per share. It continued to fall through the month, hitting a low of $2.70 on May 24.
As a result of the aberrations, two law firms last week opened class action lawsuits on behalf of investors, alleging Ability had violated the Securities Exchange Act by overstating its income and had weak internal controls for its financial reporting. Ability has brought in a contractor to bolster those controls.
Hurgin isn’t exactly concerned. “Not at all. What really matters is business itself. Results, numbers, sales, orders, revenue, income,” he said. “[Lawsuits come] automatically to any company after the restatement. Never mind.”
Scary new Ability?
How better to get the company back on track than with even more powerful spy kit? Further updates to the Ability’s product will allow cops and intel agents to harvest multimedia texts, according to the ULIN manual. That document indicates ULIN already allows for live wiretapping and the ability to listen to calls in real-time through a web browser. The tool can even grab the location of whoever the target is interacting with.
“The agent can ask the system to get the location of the other party involved in the call or SMS,” the document read. “All the intercepted calls and SMSs can be located on a map displayed to the agents who can access that information.”
By September, Hurgin believes ULIN will be able to intercept internet traffic, including web and app use. He can’t promise, however, it will be able to hoover up encrypted data.
ULIN is a young product, and may not be in wide use. According to May’s results document, Ability has sold only one ULIN product at the low end of its price scale, but has “received inquiries from a number of existing and potential customers.” It will treat that first customer, who will not be doing cross-border exploitation but focusing on targets within their own country, as a beta test. Hurgin tells me the firm has customers in Europe, Asia and Latin America. Did that include the UK? “Let’s say we’re in touch.”
Israeli surveillance world domination
Israeli surveillance companies, most built by alumni of the country’s various intelligence agencies, make up a huge chunk of the so-called “lawful interception” market. Often they work in partnerships to provide even more powerful surveillance systems. Leaks from Italian police-grade spyware dealer Hacking Team, now available on Wikileaks, revealed a host of Israeli companies looking for police-grade malware partners, including Ability, Nice Systems, now the owner of Elbit Systems’ cyber division, and Verint (previously linked with American surveillance operations). Network surveillance vendors like those four typically locate and offer a path into a person’s mobile, whilst Hacking Team and its competitors create the malware that provides complete, permanent, remote access to the device, including those critical encrypted communications.
One of HackingTeam’s more significant rivals, a highly-secretive Israeli company called NSO, is a partner of Ability, said Hurgin. He revealed NSO, and other unnamed government spyware creators, ride on Ability’s network exploits (though not via SS7) to deliver their spyware onto devices. NSO co-founder Omri Lavie has repeatedly declined interviews with me over the last year. His business is believed to have spyware that can work on iPhones and Androids, amongst other phones. “I think it’s one of the best companies in this field,” Hurgin said.
Ability isn’t the only company to target SS7 so aggressively. Last year, it was revealed that Circles Bulgaria and two other Israeli companies, Rayzone and CleverSig, were selling SS7 exploit packages, though there was little detail on what exactly they offered or for how much.
It’s clear, though, that at least one company is happy to expose the security of the telecoms backbone for significant profit. And the surveillance is only getting more invasive. As with any technology, where one crosses the Rubicon, others will follow, regardless of the potential degradation of people’s privacy.
Hurgin, meanwhile, says governments need the technology to counter the rising threat of terrorism. “It is a war.”
Source – Forbes / Thomas Fox-Brewster
DISCLAIMER
Broadstreetalerts.com is a wholly owned subsidiary of Small Cap Specialists LLC, herein referred to as SCS LLC.
Our reports/releases are a commercial advertisement and are for general information purposes ONLY. We are engaged in the business of marketing and advertising companies for monetary compensation. Never invest in any stock featured on our site or emails unless you can afford to lose your entire investment. The disclaimer is to be read and fully understood before using our services, joining our site or our email/blog list as well as any social networking platforms we may use.
PLEASE NOTE WELL: SCS LLC and its employees are not a Registered Investment Advisor, Broker Dealer or a member of any association for other research providers in any jurisdiction whatsoever.
Release of Liability: Through use of this website viewing or using you agree to hold SCS LLC, its operators owners and employees harmless and to completely release them from any and all liability due to any and all loss (monetary or otherwise), damage (monetary or otherwise), or injury (monetary or otherwise) that you may incur. The information contained herein is based on sources which we believe to be reliable but is not guaranteed by us as being accurate and does not purport to be a complete statement or summary of the available data. SCS LLC encourages readers and investors to supplement the information in these reports with independent research and other professional advice. All information on featured companies is provided by the companies profiled, or is available from public sources and SCS LLC makes no representations, warranties or guarantees as to the accuracy or completeness of the disclosure by the profiled companies. None of the materials or advertisements herein constitute offers or solicitations to purchase or sell securities of the companies profiled herein and any decision to invest in any such company or other financial decisions should not be made based upon the information provide herein. Instead SCS LLC strongly urges you conduct a complete and independent investigation of the respective companies and consideration of all pertinent risks. Readers are advised to review SEC periodic reports: Forms 10-Q, 10K, Form 8-K, insider reports, Forms 3, 4, 5 Schedule 13D. SCS LLC is compliant with the Can Spam Act of 2003. SCS LLC does not offer such advice or analysis, and SCS LLC further urges you to consult your own independent tax, business, financial and investment advisors. SCS LLC has been compensated twenty thousand dollars cash via bank wire by star media llc for a two day investor relations campaign of STEM. SCS LLC does not hold any positions in STEM. SCS LLC has previously been compensated twenty thousand dollars cash via bank wire by DF Media for the mention of MGT. We do not hold any positions in MGT. Investing in micro-cap and growth securities is highly speculative and carries and extremely high degree of risk. It is possible that an investor’s investment may be lost or impaired due to the speculative nature of the companies profiled. We have not been compensated nor do we own positions in the company/companies that are in the featured article.
The Private Securities Litigation Reform Act of 1995 provides investors a ‘safe harbor’ in regard to forward-looking statements. Any statements that express or involve discussions with respect to predictions, expectations, beliefs, plans, projections, objectives, goals, assumptions or future events or performance are not statements of historical fact may be “forward looking statements”. Forward looking statements are based on expectations, estimates, and projections at the time the statements are made that involve a number of risks and uncertainties which could cause actual results or events to differ materially from those presently anticipated. Forward looking statements in this action may be identified through use of words such as “projects”, “foresee”, “expects”, “will”, “anticipates”, “estimates”, “believes”, “understands”, or that by statements indicating certain actions & quote; “may”, “could”, or “might” occur. Understand there is no guarantee past performance will be indicative of future results.
In preparing this publication, SCS LLC has relied upon information supplied by its customers, publicly available information and press releases which it believes to be reliable; however, such reliability cannot be guaranteed. Investors should not rely on the information contained in this website. Rather, investors should use the information contained in this website as a starting point for doing additional independent research on the featured companies. The advertisements in this website are believed to be reliable, however, SCS LLC and its owners, affiliates, subsidiaries, officers, directors, representatives and agents disclaim any liability as to the completeness or accuracy of the information contained in any advertisement and for any omissions of materials facts from such advertisement. SCS LLC is not responsible for any claims made by the companies advertised herein, nor is SCS LLC responsible for any other promotional firm, its program or its structure.
Please Note: We do NOT accept free trading or restricted securities as payment for our services.
SCS LLC is not affiliated with any exchange, electronic quotation system, the Securities Exchange Commission or FINRA. SCS LLC is not a Broker/Dealer and does not engage in high frequency trading.
Stock market
Hot small cap stocks
small cap stock picks
Biotech stocks
FDA approval stocks
FDA calendar
Trade stocks
Become a day trader
Day trade stocks for a living
PDUFA date set
micro cap stocks
Best stocks 2016
Hottest small cap stocks
Best stock picks
Who to follow for stock picks
Apple news stock picks
Stock picks on apple news
