Threat actor
Amesys
Last fetched
Amesys is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.
Description
Amesys is a French company known for the sale of a program called Cerebro, capable of tracking the electronic communications of its targets, including email addresses and phone numbers. In 2007, it reportedly sold surveillance technology to Libya, which was used by the Gaddafi regime to arrest and torture critics of the regime. Former managers of Amesys went on to run Nexa Technologies, which, in 2014, sold an interception system to the Egyptian regime under the name Eagle. The system was used in connection with the detention and torture of political opponents of the Al-Sissi regime. Eagle was deployed and maintained by Amesys from 2007 to 2011. In 2021, executives of Amesys and Nexa Technologies were indicted for complicity in torture. The company rebranded to Advanced Middle East Systems and moved its operations to the United Arab Emirates.
Techniques by tactic
No ATT&CK techniques are recorded for Amesys in WhisperGraph.
Attributed infrastructure
None published. WhisperGraph carries no ATTRIBUTED_TO edge to Amesys today — this states the absence of a published link, not that Amesys has no infrastructure.
References
- https://www.europarl.europa.eu/doceo/document/A-9-2023-0189_EN.html
- https://www.fidh.org/en/region/north-africa-middle-east/egypt/surveillance-and-torture-in-egypt-and-libya-amesys-and-nexa
- https://www.amnesty.org/en/latest/press-release/2021/06/executives-of-surveillance-companies-amesys-and-nexa-technologies-indicted-for-complicity-in-torture/
- https://www.wired.com/story/french-spyware-executives-indicted-aiding-torture/
- https://www.intelligenceonline.com/surveillance--interception/2013/12/18/amesys-doing-well-in-dubai,108000091-art
© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
Related pages
Pivot from Amesys into its techniques, tactics and any attributed infrastructure.
Queries
Resolves the slug to this actor, merging every duplicate node sharing the same name.
MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
a.references AS references, a.campaigns AS campaigns
LIMIT 25Techniques this actor uses, grouped by the tactic each one serves.
MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000Infrastructure publicly attributed to this actor.
MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25Or query Whisper from your own LLM workflow via the Whisper MCP server.