ToTok

Last updated

ToTok
Developer(s) Breej Holding as a front of G42 (company)
Initial release2019 (2019)
Operating system iOS, Android
Type Communication
Website totok.ai

ToTok was a messaging app and Voice over IP app, developed by G42 (company), a UAE-based artificial intelligence company. It was the first Voice over IP app which the Emirati government allowed, and introduced in 2019 in Abu Dhabi Global Market economic free zone. [1] According to The New York Times , it was also a mass surveillance tool of the United Arab Emirates intelligence services, used to gather private information on users' phones. The Times's reporting, denied by the app's developers, caused Google and Apple to remove the app in December 2019. It disappeared on 15 February 2020.

Contents

Development and features

The app was developed by G42 (company), a UAE-based artificial intelligence company, whose CEO is the former CEO of Pegasus LLC, a one-time division of DarkMatter, an Emirati intelligence company under FBI investigation for cybercrimes. Breej Holding Ltd, was merely a front company of DarkMatter. The app puportedly was developed by Giacomo Ziani. Sheikh Tahnoun bin Zayed Al Nahyan (national security advisor)’s adopted son was the sole director of Breej Holding Ltd. [2] ToTok was linked to Pax AI, an Emirati data mining firm tied to DarkMatter and located in the same building as the Emirates' Signals Intelligence Agency. [2]

ToTok app offered free messaging, voice calls and video calls. Conference calls involving up to 20 people could also be made. [3] According to The New York Times , the app appeared to be a slightly-customized copy of YeeCall, a Chinese messaging app. [2]

Popularity

Introduced in 2019, it soon found a wide user base in the Emirates. [2] Its spread was aided by the fact that the Emirati government blocks certain functions of other messaging services such as Skype and WhatsApp, and was apparently the first Voice over IP app to gain regulatory approval. [4] The app was also promoted by state-linked Emirati publications [2] and by the Chinese telecommunications company Huawei. [5] That ToTok appeared to not be affiliated with a powerful country may also have helped its popularity in the Middle East. [2] In December 2019, BotIM, a subscription-based messaging app, sent its users a message recommending ToTok for free messaging and calls. [3]

As of December 2019, ToTok was among the most-used 50 free apps in several countries including Saudi Arabia, the United Kingdom, India and Sweden. [2] As of December 2019, the app had 7.9 million downloads between the iOS App Store and Google Play, with nearly two million daily users. [6]

Surveillance tool reports

On 22 December 2019, The New York Times reported that U.S. intelligence assessments and the paper's own investigations showed that ToTok was used by Emirati intelligence to gather all conversations, movements, relationships, appointments, sounds and images by the app's users. [2] The app does not use exploits, backdoors or malware. Instead, it gives the government access to the information shared through the app, as well as to other information on the smartphone that the government can access through permissions granted by users in order to enable the app's features. [7]

Breej Holding denied that its app was a spy tool, writing that its users "have the complete control over what data they want to share at their own discretion. The shameless fabrication by our distractors[ sic ] cannot be further from the truth." [8] The Emirati telecommunications agency issued a statement that emphasized what it said were the country's strict privacy laws, but did not directly address the Times's reporting. [9] The local Khaleej Times interviewed the "ToTok co-founder" Giacomo Ziani, who confirmed that he bought YeeCall's code, but also denied that his app was a government surveillance tool. [10]

In response to the Times's inquiries, Google and Apple removed ToTok from their respective app stores on 19 and 20 December 2019. [2] [11] [12] The app re-appeared on Google Play on 3 January 2020, [13] and disappeared again on 15 February 2020. [14]

See also

Related Research Articles

Telecommunications in the United Arab Emirates (UAE) is under the control and supervision of the Telecommunications and Digital Government Regulatory Authority which was established under UAE Federal Law by Decree No. 3 of 2003. From 1976 to 2006 the Emirates Telecommunications Corporation (Etisalat) was the sole telephone and telecommunications provider for the UAE. And while there were exceptions for free zones and modern housing developments, for the majority of the UAE, Etisalat held a monopoly on business and personal telecommunications services. In February 2006, this monopoly became a duopoly when a new telephone company and Internet service provider (ISP), du, was established to offer mobile services across the UAE and Internet and TV services to some free zone areas. However, due to geographical distribution of service areas, the companies do not compete for customers and thus effectively operate as monopolies. Earlier du provided triple play services to free zone areas under the name Emirates Integrated Telecommunications Company (EITC), which is still its legal name.

<span class="mw-page-title-main">Mass surveillance</span> Intricate surveillance of an entire or a substantial fraction of a population

Mass surveillance is the intricate surveillance of an entire or a substantial fraction of a population in order to monitor that group of citizens. The surveillance is often carried out by local and federal governments or governmental organizations, such as organizations like the NSA, but it may also be carried out by corporations. Depending on each nation's laws and judicial systems, the legality of and the permission required to engage in mass surveillance varies. It is the single most indicative distinguishing trait of totalitarian regimes. It is also often distinguished from targeted surveillance.

According to human rights organisations, the government of the UAE violates a number of fundamental human rights. The UAE does not have democratically elected institutions and citizens do not have the right to change their government or to form political parties. Activists and academics who criticize the regime are detained and imprisoned, and their families are often harassed by the state security apparatus. There are reports of forced disappearances in the UAE; many foreign nationals and Emirati citizens have been abducted by the UAE government and illegally detained and tortured in undisclosed locations. In numerous instances, the UAE government has tortured people in custody , and has denied their citizens the right to a speedy trial and access to counsel during official investigations.

<span class="mw-page-title-main">Google Voice</span> Telecommunications service by Google

Google Voice is a telephone service that provides a U.S. phone number to Google Account customers in the U.S. and Google Workspace customers in Canada, Denmark, France, the Netherlands, Portugal, Spain, Sweden, Switzerland, the United Kingdom and the contiguous United States. It is used for call forwarding and voicemail services, voice and text messaging, as well as U.S. and international calls. Calls are forwarded to the phone number that each user must configure in the account web portal. Users can answer and receive calls on any of the phones configured to ring in the web portal. While answering a call, the user can switch between the configured phones. Subscribers in the United States can make outgoing calls to domestic and international destinations. The service is configured and maintained by users in a web-based application, similar in style to Google's email service Gmail, or Android and iOS applications on smartphones or tablets.

<span class="mw-page-title-main">Rich Communication Services</span> Mobile communication protocol

Rich Communication Services (RCS) is a communication protocol between mobile telephone carriers and between phone and carrier, aiming at replacing SMS messages with a text-message system that is richer, provides phonebook polling, and can transmit in-call multimedia. It is part of the broader IP Multimedia Subsystem. Google has added support for end-to-end encryption for all chats using RCS in their own app, Google Messages. End-to-end encryption is not a feature of RCS specified by GSMA.

<span class="mw-page-title-main">UC Browser</span> Chinese web browser developed by UCWeb Inc

UC Browser is a web browser developed by mobile internet company UCWeb, a subsidiary of the Alibaba Group. It was the most popular mobile browser in India and Indonesia, and the second most popular one in China as of 2017. Its world-wide browser share as of May 2022 is 0.86% overall according to StatCounter.

Viber, or Rakuten Viber, is a cross-platform voice over IP (VoIP) and instant messaging (IM) software application owned by Japanese multinational company Rakuten, provided as freeware for the Google Android, iOS, Microsoft Windows, Apple macOS and Linux platforms. Users are registered and identified through a cellular telephone number, although the service is accessible on desktop platforms without needing mobile connectivity. In addition to instant messaging it allows users to exchange media such as images and video records, and also provides a paid international landline and mobile calling service called Viber Out. As of 2018, there are over a billion registered users on the network.

WeChat or Weixin in Chinese ; lit. 'micro-message') is a Chinese instant messaging, social media, and mobile payment app developed by Tencent. First released in 2011, it became the world's largest standalone mobile app in 2018 with over 1 billion monthly active users. WeChat has been described as China's "app for everything" and a super-app because of its wide range of functions. WeChat provides text messaging, hold-to-talk voice messaging, broadcast (one-to-many) messaging, video conferencing, video games, mobile payment, sharing of photographs and videos and location sharing.

<span class="mw-page-title-main">Nimbuzz</span> Proprietary cross-platform instant messaging

Nimbuzz is a proprietary cross-platform instant messaging and social media and mobile payment developed by Kuraakani Online Private Limited, with the origins of its technology dating back to the early 2000s. As of March 2013, Nimbuzz had 150 million users in 200 countries. By April 2014, Nimbuzz was growing by more than 210,000 new registrations per day. In October 2014, now with over 200 million users, New Call acquired 70% of Nimbuzz, valuing the app at $250 million. Under CEO Sujit Acharya's leadership, Nimbuzz suite of applications enables users to enjoy end-to-end encrypted free calls, instant messaging, games, file sharing,social networking, mobile payments & movies on their mobile device. Nimbuzz has more than 3 million lines of code. Initially, Nimbuzz offered discounted calling rates to most countries in the world. The platform processed more than a billion call minutes and in excess of 100 billion messages a month.

<span class="mw-page-title-main">Signal (software)</span> Privacy-focused encrypted messaging app

Signal is an encrypted messaging service for instant messaging, voice, and video calls. The instant messaging function includes sending text, voice notes, images, videos, and other files. Communication may be one-to-one between users or may involve group messaging.

<span class="mw-page-title-main">NSO Group</span> Israeli cyber-espionage and malware firm

NSO Group Technologies is an Israeli cyber-intelligence firm primarily known for its proprietary spyware Pegasus, which is capable of remote zero-click surveillance of smartphones. It employed almost 500 people as of 2017.

Pegasus is a spyware developed by the Israeli cyber-arms company NSO Group that is designed to be covertly and remotely installed on mobile phones running iOS and Android. While NSO Group markets Pegasus as a product for fighting crime and terrorism, governments around the world have routinely used the spyware to surveil journalists, lawyers, political dissidents, and human rights activists.

<span class="mw-page-title-main">ByteDance</span> Chinese internet technology company

ByteDance Ltd. is a Chinese internet technology company headquartered in Beijing and incorporated in the Cayman Islands.

<span class="mw-page-title-main">TikTok</span> Chinese video-focused social media platform

TikTok, whose mainland Chinese counterpart is Douyin, is a short-form video hosting service owned by ByteDance. It hosts user-submitted videos, which can range in duration from 3 seconds to 10 minutes.

DarkMatter Group is a computer security company founded in the United Arab Emirates (UAE) in 2014 or 2015. The company has described itself as a purely defensive company, however in 2016, it became a contractor for Project Raven, to help the UAE surveil other governments, militants, and human rights activists. It has employed former U.S. intelligence operatives and graduates of the Israel Defense Force technology units.

The Signals Intelligence Agency (SIA), formerly known as the National Electronic Security Authority (NESA), is the United Arab Emirates intelligence agency. In response to alleged cyber spying on opponents of Iran's best interests by the government of Iran during 2010 and 2011, the United States assisted the United Arab Emirates in late 2011 with establishing the National Electronic Security Authority (NESA) which is the UAE's equivalent to the US NSA. Created in 2012 through a Federal Decree Law, one of its official objectives is to organize the protection of the UAE's communications network and information systems.

Tahnoun bin Zayed Al Nahyan is the son of Zayed bin Sultan Al Nahyan, the founder of the United Arab Emirates. Since 2016 he has served as the National Security Advisor of UAE. At the same time he manages a business portfolio, which supports national security interests and the UAE's opaque corporate sector. He chairs G42. The 2021 Pandora Papers revealed how he and his wife use shell companies to conceal their wealth.

The COVID-19 pandemic in the United Arab Emirates is part of the worldwide pandemic of coronavirus disease 2019 caused by severe acute respiratory syndrome coronavirus 2. The first confirmed case in the United Arab Emirates was announced on 29 January 2020. It was the first country in the Middle East to report a confirmed case.

<span class="mw-page-title-main">G42 (company)</span> Artificial Intelligence company

Group 42 Holding Ltd, operating under the business as G42, is an AI development holding company based in Abu Dhabi, UAE, founded in 2018. The organization is focused on AI development across various industries inckuding government, healthcare, finance, oil and gas, aviation, and hospitality. Tahnoun bin Zayed Al Nahyan, UAEs national security advisor is the controlling shareholder and chairs the company. Because G42 has strong ties to China U.S. authorities have been concerned that G42 serves as a channel through which sophisticated U.S. technology is diverted to Chinese companies or the government.

<span class="mw-page-title-main">Abdallah Abu Sheikh</span> Emirati-Jordanian businessman

Abdallah Abu Sheikh is an Emirati-Jordanian businessman, founder of Astra Tech, and CEO of BOTIM.

References

  1. "Co-creator defends suspected UAE spying app called ToTok". AP NEWS. 2 January 2020. Retrieved 6 January 2020.
  2. 1 2 3 4 5 6 7 8 9 Mazzetti, Mark; Perlroth, Nicole; Bergman, Ronen (22 December 2019). "It Seemed Like a Popular Chat App. It's Secretly a Spy Tool". The New York Times . Retrieved 22 December 2019.
  3. 1 2 Ahmed, Ashfaq (15 December 2019). "People in UAE unsubscribe to paid calling apps and start using free internet calling service". gulfnews.com. Archived from the original on 24 December 2019. Retrieved 24 December 2019.
  4. Gambrell, Jon (2 January 2020). "Co-creator defends suspected UAE spying app called ToTok". AP News. Retrieved 7 January 2020.
  5. Hughes, Matthew (23 December 2019). "Emirati 'surveillance app' ToTok promoted by Huawei as Apple punts it from store". The Register . Retrieved 28 December 2019.
  6. Koetsier, John (23 December 2019). "Top-50 Social App ToTok Outed As Spying Tool For United Arab Emirates; Apple And Google Delete It". Forbes. Archived from the original on 24 December 2019. Retrieved 24 December 2019.
  7. "Popular chat app ToTok is actually a spying tool of UAE government – report". The Guardian. 23 December 2019. ISSN   0261-3077. Archived from the original on 24 December 2019. Retrieved 24 December 2019.
  8. "Is ToTok a spying tool? Here's a statement from the app". Khaleej Times. 25 December 2019. Archived from the original on 25 December 2019. Retrieved 25 December 2019.
  9. "UAE's TRA issues statement on ToTok app allegations". Khaleej Times. 27 December 2019.
  10. "ToTok founder explains why app was allowed in UAE". Khaleej Times. 29 December 2019. Retrieved 29 December 2019.
  11. Gokulan, Dhanusha (23 December 2019). "ToTok no longer available in UAE, residents disappointed". Khaleej Times . Dubai, UAE. Retrieved 23 December 2019.
  12. "Google and Apple remove alleged UAE spy app ToTok". BBC News. 23 December 2019. Retrieved 23 December 2019.
  13. Kumar, Ashwani. "ToTok now back in UAE's Google Play Store". Khaleej Times. Retrieved 3 January 2020.
  14. Peters, Jay (14 February 2020). "Google removes alleged spying app ToTok from the Play Store for a second time". The Verge.

Further reading