Forbes Newsletters

Plus: DHS Asks OpenAI To Help Unmask A ChatGPT User

Forbes

Presented by

Among the many ways President Trump’s immigration cops can identify its targets, one lesser-known technique is surveillance on WhatsApp.

While this isn’t new to Trump’s second term, a recently-unsealed search warrant has shed light on just how the current Immigration and Customs Enforcement (ICE) agency uses it.

Per the warrant, in mid-2024, under the Biden administration, the Homeland Security Investigations (HSI) division in ICE secured a “pen register” order on the WhatsApp account of a Guatemalan woman who had illegally entered the country four times in the previous decade and was believed to be selling fake identification documents. Such pen registers don’t allow the government to peep on private communications (which are encrypted), but do allow it to collect metadata on a given WhatsApp account, such as who the target communicated with and when. Identifying individuals with that metadata alone appears to be simple enough for the ICE unit.

In this case, an HSI investigator ran the numbers the suspect had chatted with on WhatsApp through a number of unspecified databases. “I was able to possibly identify the majority of the people with whom Ayala was communicating with on WhatsApp during this small time frame,” an HSI agent wrote in the warrant. (Meta hadn't commented at the time of publication.)

One of those turned out to be another person accused of selling IDs, including fraudulent lawful permanent resident and Social Security cards. He was located, arrested and charged in September this year. It’s possible the government can now also map out who was buying that second suspect’s IDs, enabling them to track more undocumented immigrants. 

The warrant reviewed by Forbes, filed towards the end of last week, now allows the government to force unlock that suspect’s phone by applying the defendant’s fingerprints to the device, or holding up the phone to their face, depending on what, if any, biometric access features they’re using.

As Forbes previously reported, one issue with such pen registers is that they require the government to provide much less detail to support a finding of probable cause. Privacy advocates say they could be abused, enabling overly broad surveillance on at-risk communities. Court dockets show hundreds of pen register orders filed this year that remain under seal across U.S. states, from Texas to Florida to New York.

One company that continues to profit from such a widespread form of surveillance is PenLink, a Nebraska-based company founded by little-known entrepreneur Mike Murman, which helps agencies like ICE and the FBI set up pen registers. It’s also providing a social media surveillance tool once banned by Facebook. Per a $25 million contract it currently has with ICE, the company gives the agency the ability to “monitor and analyze voice, text and web communications.”

Got a tip on surveillance or cybercrime? Get me on Signal at +1 929-512-7964.

Thomas Brewster Associate Editor, Cybersecurity

Follow me on Forbes.com

Mother Jones investigated the activities of a secretive surveillance company called First Wap, which takes advantage of loopholes in global telecommunications systems to help clients track all kinds of targets.

Among them were a former prime minister of Qatar, 23andMe founder Anne Wojcicki, the ousted first lady of Syria Asma al-Assad and even a phone connected to actor Jared Leto.

The Stories You Have To Read Today
In what appears to be the first known federal search warrant asking OpenAI for user data, the DHS asked for the identity of a person behind two very specific ChatGPT prompts, Forbes reported.

The U.S. announced a seizure of digital currency worth $15 billion from the Prince Group, a Cambodian entity linked to online investment scams and sextortion campaigns. It’s the DOJ’s largest ever seizure.

Hackers linked to the Chinese government penetrated computers at security and networking provider F5 Systems back in 2023, according to Bloomberg. The attackers were only discovered in August this year.

A crew of cybercriminals known as Scattered LAPSUS$ Hunters have de-anonymized a large number of DHS, ICE and DOJ officials, according to 404 Media, and they claim to have a lot more to come.

Presented by AvePoint
What’s Stalling AI? 775 IT Leaders Weigh In
AI’s promise meets reality: As adoption surges, organizations face security risks, trust issues, and stalled rollouts. New research from AvePoint reveals why stewardship – not speed – is the key to unlocking enterprise AI success.

Get The Report.
Winner Of The Week
Europol announced the arrest of seven suspects–including five Latvian nationals–allegedly involved in running SIM farms, which allow criminals to acquire telephone numbers for use in criminal activities. Typically used to set up fake accounts for social media and to carry out scam campaigns, the entity was linked to over 3,000 cases of cybercrime, with at least $5 million in losses.
Loser Of The Week
Former Google boss and tech billionaire Eric Schmidt has been accused by his former mistress of having her and her family surveilled, according to a new civil lawsuit. Schmidt is yet to comment.
MORE FROM FORBES
MOST-READ FROM FORBES