• On MovieTome: TRANSFORMERS 2 SPOILERS!

December 1, 2006 2:20 PM PST

FBI taps cell phone mic as eavesdropping tool

Last modified: December 1, 2006 6:35 PM PST

The FBI appears to have begun using a novel form of electronic surveillance in criminal investigations: remotely activating a mobile phone's microphone and using it to eavesdrop on nearby conversations.

The technique is called a "roving bug," and was approved by top U.S. Department of Justice officials for use against members of a New York organized crime family who were wary of conventional surveillance techniques such as tailing a suspect or wiretapping him.

Nextel cell phones owned by two alleged mobsters, John Ardito and his attorney Peter Peluso, were used by the FBI to listen in on nearby conversations. The FBI views Ardito as one of the most powerful men in the Genovese family, a major part of the national Mafia.

The surveillance technique came to light in an opinion published this week by U.S. District Judge Lewis Kaplan. He ruled that the "roving bug" was legal because federal wiretapping law is broad enough to permit eavesdropping even of conversations that take place near a suspect's cell phone.

Kaplan's opinion said that the eavesdropping technique "functioned whether the phone was powered on or off." Some handsets can't be fully powered down without removing the battery; for instance, some Nokia models will wake up when turned off if an alarm is set.

While the Genovese crime family prosecution appears to be the first time a remote-eavesdropping mechanism has been used in a criminal case, the technique has been discussed in security circles for years.

The U.S. Commerce Department's security office warns that "a cellular telephone can be turned into a microphone and transmitter for the purpose of listening to conversations in the vicinity of the phone." An article in the Financial Times last year said mobile providers can "remotely install a piece of software on to any handset, without the owner's knowledge, which will activate the microphone even when its owner is not making a call."

Nextel and Samsung handsets and the Motorola Razr are especially vulnerable to software downloads that activate their microphones, said James Atkinson, a counter-surveillance consultant who has worked closely with government agencies. "They can be remotely accessed and made to transmit room audio all the time," he said. "You can do that without having physical access to the phone."

Because modern handsets are miniature computers, downloaded software could modify the usual interface that always displays when a call is in progress. The spyware could then place a call to the FBI and activate the microphone--all without the owner knowing it happened. (The FBI declined to comment on Friday.)

"If a phone has in fact been modified to act as a bug, the only way to counteract that is to either have a bugsweeper follow you around 24-7, which is not practical, or to peel the battery off the phone," Atkinson said. Security-conscious corporate executives routinely remove the batteries from their cell phones, he added.

FBI's physical bugs discovered
The FBI's Joint Organized Crime Task Force, which includes members of the New York police department, had little luck with conventional surveillance of the Genovese family. They did have a confidential source who reported the suspects met at restaurants including Brunello Trattoria in New Rochelle, N.Y., which the FBI then bugged.

But in July 2003, Ardito and his crew discovered bugs in three restaurants, and the FBI quietly removed the rest. Conversations recounted in FBI affidavits show the men were also highly suspicious of being tailed by police and avoided conversations on cell phones whenever possible.

That led the FBI to resort to "roving bugs," first of Ardito's Nextel handset and then of Peluso's. U.S. District Judge Barbara Jones approved them in a series of orders in 2003 and 2004, and said she expected to "be advised of the locations" of the suspects when their conversations were recorded.

Details of how the Nextel bugs worked are sketchy. Court documents, including an affidavit (p1) and (p2) prepared by Assistant U.S. Attorney Jonathan Kolodner in September 2003, refer to them as a "listening device placed in the cellular telephone." That phrase could refer to software or hardware.

One private investigator interviewed by CNET News.com, Skipp Porteous of Sherlock Investigations in New York, said he believed the FBI planted a physical bug somewhere in the Nextel handset and did not remotely activate the microphone.

"They had to have physical possession of the phone to do it," Porteous said. "There are several ways that they could have gotten physical possession. Then they monitored the bug from fairly near by."

But other experts thought microphone activation is the more likely scenario, mostly because the battery in a tiny bug would not have lasted a year and because court documents say the bug works anywhere "within the United States"--in other words, outside the range of a nearby FBI agent armed with a radio receiver.

In addition, a paranoid Mafioso likely would be suspicious of any ploy to get him to hand over a cell phone so a bug could be planted. And Kolodner's affidavit seeking a court order lists Ardito's phone number, his 15-digit International Mobile Subscriber Identifier, and lists Nextel Communications as the service provider, all of which would be unnecessary if a physical bug were being planted.

A BBC article from 2004 reported that intelligence agencies routinely employ the remote-activiation method. "A mobile sitting on the desk of a politician or businessman can act as a powerful, undetectable bug," the article said, "enabling them to be activated at a later date to pick up sounds even when the receiver is down."

For its part, Nextel said through spokesman Travis Sowders: "We're not aware of this investigation, and we weren't asked to participate."

Other mobile providers were reluctant to talk about this kind of surveillance. Verizon Wireless said only that it "works closely with law enforcement and public safety officials. When presented with legally authorized orders, we assist law enforcement in every way possible."

A Motorola representative said that "your best source in this case would be the FBI itself." Cingular, T-Mobile, and the CTIA trade association did not immediately respond to requests for comment.

Mobsters: The surveillance vanguard
This isn't the first time the federal government has pushed at the limits of electronic surveillance when investigating reputed mobsters.

In one case involving Nicodemo S. Scarfo, the alleged mastermind of a loan shark operation in New Jersey, the FBI found itself thwarted when Scarfo used Pretty Good Privacy software (PGP) to encode confidential business data.

So with a judge's approval, FBI agents repeatedly snuck into Scarfo's business to plant a keystroke logger and monitor its output.

Like Ardito's lawyers, Scarfo's defense attorneys argued that the then-novel technique was not legal and that the information gleaned through it could not be used. Also like Ardito, Scarfo's lawyers lost when a judge ruled in January 2002 that the evidence was admissible.

This week, Judge Kaplan in the southern district of New York concluded that the "roving bugs" were legally permitted to capture hundreds of hours of conversations because the FBI had obtained a court order and alternatives probably wouldn't work.

The FBI's "applications made a sufficient case for electronic surveillance," Kaplan wrote. "They indicated that alternative methods of investigation either had failed or were unlikely to produce results, in part because the subjects deliberately avoided government surveillance."

Bill Stollhans, president of the Private Investigators Association of Virginia, said such a technique would be legally reserved for police armed with court orders, not private investigators.

There is "no law that would allow me as a private investigator to use that type of technique," he said. "That is exclusively for law enforcement. It is not allowable or not legal in the private sector. No client of mine can ask me to overhear telephone or strictly oral conversations."

Surreptitious activation of built-in microphones by the FBI has been done before. A 2003 lawsuit revealed that the FBI was able to surreptitiously turn on the built-in microphones in automotive systems like General Motors' OnStar to snoop on passengers' conversations.

When FBI agents remotely activated the system and were listening in, passengers in the vehicle could not tell that their conversations were being monitored.

Malicious hackers have followed suit. A report last year said Spanish authorities had detained a man who write a Trojan horse that secretly activated a computer's video camera and forwarded him the recordings.

See more CNET content tagged:
conversation, Nextel Communications Inc., suspect, microphone, handset

Add a Comment (Log in or register) 71 comments (Showing first 20 comments)
welcome to...
by dondarko December 1, 2006 4:48 PM PST
1984 enjoy your stay. And I only say this b/c with current domestic surveillance program this type of this is probably happening without the warrants.
Reply to this comment
boycott cellphones
by n3td3v December 1, 2006 6:12 PM PST
that was easy. next
Reply to this comment View reply
I place my phone is a special pouch.
by kamwmail-cnet1 December 1, 2006 7:28 PM PST
That's designed to be sound proof. Also, bluetooth is disabled. So bluebug, bluestumbler, bluejack and bluesnark can't be run against it.

And my PDA phone has monitoring software running to let me know when it's activated for no reason.

There is no reason Big Brother (FBI or Microsoft) is able to bug you. If they can, it just mean you're too stupid to protect yourself.
Reply to this comment View all 3 replies
Positioning, sound and images ...
by My-Self December 1, 2006 10:12 PM PST
Could be used for industrial espionage, to blackmail/threaten/buy political opponents ...

BTW, even if the battery is removed, a 'supercap' or small Lithium would be enough to capture voice and store it to the generous Nand Flash that cell phones now carry (to be sent later, once the main battery is connected), so people (and not only executives) should not rely on that for *really* confidential talks.

Maybe it's time for security conscious people to go back to the good old 'receive only' pager.
Reply to this comment View reply
Fake Mozarella Cheese
by CancerMan2 December 1, 2006 11:16 PM PST
The FBI has been going after organized crime for like 50 years and we still have entire sectors of the economy, trucking and waste disposal to name a few, controlled by the mob. That either means law enforcement is completely inept, or they are just as corrupt as the people they are supposed to catch. Whenever I see a "war" that costs billions of taxpayer dollars and goes on for decades, I have to ask "Why?". Also,, why is it wh never hear about the FBI going after the Russian mob, or the Chinese mob, or the Vietnames mob. They are always picking on the poor Italian mob. This seems like discrimination to me. The ACLU should file a lawsuit.
Reply to this comment
voip even worse
by marycnet5 December 2, 2006 6:32 AM PST
VOIP phone conversations may be recorded easily too.
from http://thatdamnpc.com:

VOIP phone data open to hacking ??WireShark, detects ?voice over internet telephone VoIP calls as they traverse a network, while another, Cain & Abel, records them [digital audio files] onto a hard drive, like an MP3.? [The Register] (solution: only purchase voip services which include strong encryption.)

Corporate spies and career criminals will find ways to exploit this spy tool. bummer.
Reply to this comment View all 2 replies
U something to hide?
by dribble69 December 2, 2006 6:33 AM PST
The only bad deal about this is telling the bad guys like the mob and [al kyda] about it is just plain stupid and irresponsable. Leave it to us to spill the beans. Boycot? duh. Sound proof pouch. duh, if it is was on vibrate sure, that would work, but so does paranoid-no-more drugs. I completely like the idea. Anyone with anything to hide won't. Think of how great this would be to bust all kinds of bad people. But now many of them are on to it. How about christal meth drug dealers? The feds could clean house, not that it would go away. Now there is a paranoid bunch. I bet they will have thier phones in "pouches". duh
Reply to this comment View all 5 replies
digital ham... "tor" - how ironic
by freq December 2, 2006 8:39 AM PST
http://tor.eff.org/overview.html.en

http://home.teleport.com/~nb6z/

http://en.wikipedia.org/wiki/Telegraphy
Reply to this comment
Thank you so much...
by El Kabong December 2, 2006 8:45 AM PST
for making it more difficult to catch the bad guys. I can rest easy knowing that c|net is out there protecting the interests of the mafiosi.
It ranks right up there with CNN letting Osama know he ws being tracked by his cell phone. I'm sure you folks in the news business will be thrilled when there is another major attack on innocent people... it cures a slow news day.
Reply to this comment View all 6 replies
aluminum foil
by pyranine December 2, 2006 8:26 PM PST
Couldn't you just wrap the phone in aluminum foil to keep it from transmitting? Aluminum foil should work as a makeshift faraday cage.
Reply to this comment View reply
Not Atkinson Again
by shadow116 December 2, 2006 9:35 PM PST
Stop quoting and interviewing this kook. An expert he is not
Reply to this comment
another Homeland Security threat
by W2Kuser December 3, 2006 10:55 AM PST
Since this "feature" can be activated remotely, it means that it is vulnerable to being hacked.

Yet another major threat to homeland security...
Reply to this comment View all 2 replies
It isn't about that. It's about other people...
by lewismetoo December 3, 2006 8:38 PM PST
like people you work with being able to get the upper hand on you and you going crazy because you can't figure out how they are doing it.

I'm glad this info was released. I can now take measures to prevent evil people from messing with my mind.

I've already turned off my Treo and plugged the mic. I have removed all cordless phones and replaced them with corded versions that have the line unplugged. Anything with a wireless mic is disabled.

As far as the Gov. listening in on me, that doesn't bother me at all because I am a law abiding citizen and have nothing to hide. What bugs me is the few ego-maniacal guys I work with getting it over on me and ruining my life by spreading what they hear around to everyone.

It makes sense now. Every physician I seen...eye, dental and regular...have, after seeing me on the first visit, when I return for a second visit do a complete 180 in their attitude toward me.

I work with one guy who thinks of himself very highly and who can't cope with people having any form of privacy. Invading people's privacy is like a hobby with him. He has several law enforcement friends that would have access to all the latest high tech equipment for giving him the upper hand.

If this article had not been revealed he'd be getting closer and closer to defeating me. Now that I know, he'll be lucky to get anything unwittingly from me.
Reply to this comment View reply
Regarding privacy:
by skipdexter December 4, 2006 10:27 AM PST
Regarding privacy:

"Why worry if you're not doing anything wrong?"

Because it assumes a trust and faith in people who are presumed to be always honest, diligent and conscientious - many times in history shows that not to be a correct approach. It also assumes that our government or bosses, etc. always have our best interests at heart, and would never seek to harm us for their own greed or avarice or other reasons.

Some more and much shorter answers:

"If I'm not doing anything wrong, then there is no reason to watch me."

"Why is there a problem with privacy?"

"Because someone might do something wrong with my information, on purpose or not."

"Because the government is the one that defines wrong, and they aren't always right."

"Because the government is the one that defines wrong, and the definitions change."

"Who watched the watchers?"

Widespread surveillance is the actual definition of a police state.


"If you give me six lines written by the hand of the most honest man, I would find something in them to have him hanged." -- Cardinal Richelieu
Reply to this comment
Why don't the phone makers simply..
by lewismetoo December 4, 2006 10:40 AM PST
put a mic switch in their phones that will physically separate the mic circuit effectively removing a mic from the phone. No mic, no way of listening.

The Treo has always had a hardware ringer switch though standard cell phones use a software switch. There shouldn't be any problem with incorporating such a mic switch, though.
Reply to this comment
Improvement on Lord Acton
by BradKC1 December 4, 2006 2:37 PM PST
Lord Acton would have been more accurate if he had added. "It is the corrupt who seek power." Though some of what Lord Acton says may be true my contention is that the majority of those who are corrupt weren't corrupted by the power they wield. They sought the power because they were already corrupt. A big difference and an important point to note about some human beings' nature.
Reply to this comment
Money to be made here
by Mergatroid Mania December 4, 2006 6:04 PM PST
Anyone who can install a simple switch on the battery contacts of a cell phone could make a buck here.

I'll never buy a car with on-star installed. I'll never buy a phone made by any of the companies listed here. That's all I can do practically.

Again I have to ask, where are the lawsuits? How can it be legal for a consumer devices microphone to be enabled when the device is powered off?

How would people feel if they were told the microphone in their land line phone could be turned on at any minute even if the handset is in the cradle?

Sounds like grounds for a class action lawsuit to me...
Reply to this comment View reply
Why Would You Report This?
by jonbrown117 December 5, 2006 7:31 PM PST
Alright I got a question for Fox News and every other news agency out there. Why would you report a story like this? Sometimes things are better left unsaid. It's kind of like letting the "bad guys" in on the secrets of the government. I especially love when I watch the news and they're reporting on the vulnerabilities of our country. I like most enjoy a great news story, but can you please report on issues that don't jeoardize securities. In this case not only did you blow the whisle on the FBI's technology, but you also made it aware that individuals have the same technology at their disposal. Enough is enough already, let's not give vital information to our enemies!
Reply to this comment View all 2 replies
But if you aint doing nothing wrong- U idiote!
by ssnake December 6, 2006 1:23 AM PST
This is the attitude of a coward! I did nothing wrong so let them take away our rights. Do you see the stupidity in this statement? what you did wrong was let your rights get taken away. Let's put a camera in your bedroom and in the shower and broadcast it 24/7 all over internet. What's the problem? You ain't doing nothing wrong. That's why we have rights. Do you want the world to see you nude or do you want to invoke your right to privacy. Rights are for everyone. Not just those who ain't doing nothing wrong. I can assure you that if they take away what little rights we have left, You will feel naked!
Reply to this comment View reply
and the is CIA is in bed with Google
by tx_techie December 6, 2006 3:10 PM PST
http://www.prisonplanet.com/articles/december2006/061206seedmoney.htm

Use http://www.scroogle.org/ instead
Reply to this comment
 See all 71 Comments >>
Powered by Jive Software
advertisement

Latest tech news headlines

Resource center from News.com sponsors
You Need The Speed of Norton 2009
Introducing Norton Internet Security™2009

Click Here!
With one-click, one-minute install, under 8MB of memory usage and fewer, shorter scans, it's the fastest security suite anywhere. Norton. Smart Security, Engineered for Speed. Get a FREE trial today!

Click Here!
The Fastest Security Suite Anywhere

Experience the revolutionary Norton Internet Security™ 2009. With Norton™ Insight, a new feature, you get precision security that targets only at risk files for fewer, faster, shorter scans

Win a Trip to Space!*

Enter the Blast Off with Norton Sweepstakes for your shot at a trip to space. You could experience being fast and weightless, just like the new Norton 2009. *No purchase necessary; click for full details.

FREE Trial!

Act now to get your FREE trial of Norton Internet Security 2009. Try it for the protection. Love it for the speed

Norton Safe Web NEW!

A community-based system that rates web site safety

Norton Labs NEW!

Users can download new security technologies and share input directly with developers. Help us shape our future products!

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

advertisement

Inside CNET News

Scroll Left Scroll Right