Encrypted ‘Ghost’ app: What we know

Police revealed Tuesday they had infiltrated and taken down an encrypted chat app called Ghost used by criminals across the world.

The operation, coordinated by the European Union’s police agency Europol, is the latest in a string of takedowns of chat apps that have led to hundreds of criminal prosecutions.

What is Ghost?

The market for encrypted chat apps is booming, with WhatsApp being the most widely known and popular service.

These apps encrypt messages to prevent outsiders reading private chats, and are not illegal.

But several features of the Ghost service, which first landed on the scene in 2021, made it much more appealing to criminals, according to Europol.

Users would buy a customized phone rather than simply downloading an app from a provider online.

The police agency said in a statement that Ghost was effectively its own ecosystem “with a network of resellers based in several countries”.

Users could get Ghost without giving any personal information or an existing phone number, making it 100 percent anonymous, Europol said.

The service employed three separate encryption standards and users could remotely “self-destruct” all messages and reset the phone remotely if, for example, it were seized by the authorities.

Europol said Ghost used servers “hidden away” in Iceland and France, its founder was in Australia, and the money trail led to the United States.

Who used it?

According to the police, Ghost was used pretty much exclusively by criminals.

“Across many months, and indeed hundreds of thousands of intercepted modes of communication, we’ve no evidence to suggest this was used by anyone other than criminal enterprises,” said Assistant Commissioner David McLean from the Australian Federal Police.

Europol said the app had several thousand users worldwide with around 1,000 messages being exchanged each day.

Jean-Philippe Lecouffe, Europol deputy executive director, said the operation had taken down “a tool that was a lifeline for serious and organized crime”.

“This tool enabled drug trafficking, weapons dealing, extreme violence and money laundering on an industrial scale,” he said.

So far, 51 people have been arrested in connection with the operation, most of them in Australia.

Has this happened before?

Several other major apps have been taken down in similar operations in recent years.

EncroChat was a service reputedly used almost exclusively by criminals and like Ghost came with specially altered phones.

When it was taken down, police said criminals moved over to Sky ECC, which was then dismantled.

Three years ago another service, ANOM, was taken offline and hundreds were arrested.

But the twist in the tail was that ANOM had been set up and run by the FBI from the start.

Police said in a news conference Tuesday that Ghost was not as big or as widely used as these other services and that the landscape for encrypted apps had become “fragmented”.

“For us, the size is not the main thing,” said Lecouffe.

“Sometimes the smaller networks get the most important criminals and most interesting information.”

Why was Ghost taken down?

WhatsApp, Signal and Telegram are part of a crowded field of apps marketing themselves on the privacy of their chats.

Although their services are legal, some of the content is not.

The founder of Telegram, which offers some encrypted services though is not private by default, was arrested recently in France for allowing criminal content on his platform.

The big difference is that the vast majority of users of these apps are presumably not criminals, whereas Ghost’s purpose appears to have been to enable private chats among criminals.

But during Tuesday’s news conference Lecouffe sent a message to all encrypted services, saying access to messages between criminals was the “lifeblood” of investigators.

He said the police were committed to “building a system that respects privacy while upholding justice”.

But private companies had “the responsibility to ensure their platforms are not becoming playgrounds for criminals”.

© 2024 AFP