US Lawmakers Seek Blacklist Of 3 Indian IT Firms

Three US lawmakers, including Democratic Senators Ron Wyden and Sheldon Whitehouse, and Republican Representative Pat Harrigan, have urged the Trump administration to blacklist three Indian IT firms accused of being linked to hack-for-hire operations and a long-running campaign of targeted espionage against US citizens, businesses, and lawyers.

The lawmakers have asked the US Commerce Department to add BellTroX, CyberRoot, and Sunkissed Organic Farms Pvt Ltd, formerly known as Appin Technology Pvt Ltd, and its subsidiaries to the Entity List. This list is used by Washington to restrict trade with foreign entities considered to pose national security or foreign policy concerns.

If the request is approved, the companies could face restrictions on accessing US-origin software, cloud infrastructure, and cybersecurity tools. The lawmakers described the alleged activities as part of a long-running espionage campaign that has been ongoing for more than fifteen years.

The three firms have previously been named in media investigations and reports by major technology companies over alleged involvement in the global hack-for-hire industry. BellTroX and CyberRoot were identified by Reuters in 2022 as prominent players in the cybermercenary sector.

The investigation reported that the companies had allegedly been used by Western lawyers and private investigators to spy on rivals during legal and business disputes. A separate investigation by the news agency in 2023 examined Appin Technology, describing it as an early participant in the hack-for-hire industry.

The report alleged that the company evolved from an educational venture into an operation targeting executives, politicians, military officials, and wealthy individuals. The firms have faced scrutiny from other organisations as well, including The New Yorker and the Bureau of Investigative Journalism, which have reported on their alleged links to hacking-for-hire activities.

Meta and Google have also published reports linking cyberattacks to the companies. Executives at all three firms have denied wrongdoing and rejected the allegations. The latest demand by the US lawmakers comes amid growing concerns over the use of commercial hacking services to conduct surveillance and cyberattacks on behalf of private clients.

Such operations have drawn increased attention from governments and technology companies over their alleged targeting of individuals and organisations involved in political, legal, and commercial disputes. The move is seen as a significant step towards addressing the growing threat of cyber espionage and hacking-for-hire operations.

The US lawmakers' request is likely to have significant implications for the Indian IT firms and the global cybersecurity landscape. The Entity List is a powerful tool used by the US government to restrict trade with foreign entities that pose a national security or foreign policy concern.

The addition of the three Indian IT firms to the list would send a strong message to companies involved in hacking-for-hire operations and cyber espionage. It would also highlight the need for greater cooperation and regulation in the global cybersecurity industry.

In conclusion, the US lawmakers' request to blacklist the three Indian IT firms is a significant development in the ongoing efforts to address the growing threat of cyber espionage and hacking-for-hire operations. The move is likely to have far-reaching implications for the Indian IT firms, the global cybersecurity landscape, and the ongoing efforts to regulate the use of commercial hacking services.