In the United Arab Emirates, the use of messaging apps like WhatsApp, Facebook Messenger, Skype, and similar services is prohibited. However, an app called ToTok has been made available for installation, allowing users to chat. Why this app and not another? That's the question The New York Times asked , and it seems they've uncovered a major scandal.
A chat with the government
ToTok launched in early 2019, arriving as a lifeline for users who wanted to chat with friends and family. Thanks to its near-exclusive nature in the app sector, ToTok gained immediate popularity in the country, leading millions of users to download it almost without hesitation. However, it seems that the people behind the app don't inspire much confidence in terms of user privacy.
The New York Times investigated the case, conducting a technical analysis and several interviews with security experts, until they discovered that behind ToTok was Breej Holding, a company affiliated with DarkMatter, an Emirati cyber intelligence firm formed by former employees of the National Security Agency and former Israeli military intelligence agents. Quite something.
DarkMatter was already under investigation by the FBI after being accused of alleged cybercrimes, so things are not looking good, but on top of that we must add that there would be another company related to ToTok called Pax AI, which is not more than an Abu Dhabi-based data mining company that is also related to DarkMatter. To further curl the loop, Pax AI operates in the same building as the Emirates Signals Intelligence Agency, so you don't have to be too clever to find the connections.
The app has disappeared
Fortunately, the investigation conducted by The New York Times and the calls the newspaper made to Google and Apple have led both companies to remove the app from their respective stores, so it's currently not possible to download it officially. However, the app still works, so anyone with it installed on their phone can continue using it without problems.
At the moment it is unknown if the application has been able to record audio or video calls, but it is believed that at least it has been able to analyze the records and contacts of the users in search of patterns. Considering that users voluntarily gave it access to the gallery, contacts and microphone, the application has been able to know everything. And that is the risk that is obtained by allowing access to all our data unconsciously.