Microsoft Accuses DSIRF of Creating Malicious Software, Firm Says Subzero Was for Official Use in EU

Microsoft said the firm, DSIRF, had deployed the spying software, or spyware at an unspecified number of banks, law firms and strategic consultancies.

By Reuters | Updated: 30 July 2022 10:35 IST

Microsoft Accuses DSIRF of Creating Malicious Software, Firm Says Subzero Was for Official Use in EU

Photo Credit: Reuters

DSIRF has claimed that Subzero is neither sold nor made available for commercial use

Highlights

Microsoft claimed that the spying tool was installed at banks, law firms
It was not clear which EU member state governments were using the tool
Austria's interior ministry says that it is investigating the claims

An Austrian firm which Microsoft said created malicious software that was detected on the computer systems of some of its clients in at least three countries has said its spying tool "Subzero" was for official use in EU states only.

On Wednesday, Microsoft said the firm, DSIRF, had deployed the spying software, or spyware capable of accessing confidential information such as passwords or login credentials at an unspecified number of unidentified banks, law firms, and strategic consultancies.

"Subzero is a software of the Austrian DSIRF GesmbH, which has been developed exclusively for official use in states of the EU. It is neither offered, sold, nor made available for commercial use," DSIRF said in an emailed statement.

[Sponsored] Samsung Galaxy S24: The Ultimate Camera Phone With Smarter On-Device AI

"In view of the facts described by Microsoft, DSIRF resolutely rejects the impression that it has misused Subzero software," it added.

It was not clear which EU member state governments, if any, were using the tool. DSIRF did not respond to requests for further comment.

Austria's interior ministry told local news agency APA on Friday that it was investigating the Microsoft claims. The ministry did not respond to requests from Reuters for comment.

iCloud Passwords for Windows Gets 2FA Code Generator Support: Report

Spyware tools have come into increased focus in Europe and the United States after Pegasus, spyware developed by Israel's NSO, was found to have been used by governments to spy on journalists and dissidents.

DSIRF said they had commissioned an independent expert to investigate the issues raised by Microsoft, and had reached out to the U.S. tech giant for "collaboration on the issue".

Microsoft declined to offer further comment.

In its Thursday blog post, the company said DSIRF had developed four so-called "zero-day exploits", serious software flaws of great value to both hackers and spies because they work even when software is up to date.

DSIRF listed a handful of previous, commercial, clients as references in an internal presentation promoting Subzero that was published by the German news website Netzpolitik last year.

Two of the companies that were named in that presentation, SIGNA Retail and Dentons, told Reuters they had not used the spyware and had not consented to be a reference for the company.

DSIRF did not respond to a request for comment on the matter.

Why is Oppo making strange choices with its flagship Reno series? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.