Author: azeeadmin

20 Jul 2021

Collectiv raises $16M Series A to connect food producers directly with kitchens

In the modern world, we tend to like to know where our food comes from and this has massively influenced professional kitchens. For decades, food suppliers have sat on one side and distribution channels (restaurants and the like) on the other. But large wholesalers in the middle have traditionally crushed producers on prices and late payments. Professional kitchens can circumvent this by going direct to food producers. But they can’t manage hundreds of direct relationships. It’s just not been possible. Until the Internet.

Collective Food is a new startup that addresses this with a new take on the food supply chain model. It directly sources products from suppliers, unlocking price advantages for both suppliers and buyers, it says. Its competitors include Brakes, Bidfood, and Transgourmet.

It’s now raised £12M / $16M in its Series A funding round led by VNV Global, along with VisVires New Protein (VVNP), Octopus Ventures, Norrsken VC, and existing investors, including Partech, Colle Capital, and Mustard Seed. Frontline Ventures was the earliest investor in 2017.

Launched in 2019, Collectiv so far operates in the UK and France. It operates by sourcing food directly from producers, disintermediating the wholesaler middleman, and delivering straight to professional kitchens. Customers include restaurants, hotels, catering firms, meal-kit companies, and dark kitchens. The company claims that this approach generates 50% less CO2 emissions than traditional supply methods better prices, fresher products, transparency, traceability, and more reliable service.

Customers include Big Mamma Group, The Hush Collection, Dirty Bones, Megan’s, Crussh, Butchies, Cocotte, Tossed, and Fresh Fitness Food. 

Collectiv founder Jeremy Hibbert-Garibaldi said in a statement: “We’re being pushed by a combination of strong tailwinds: end-consumers demanding a better understanding of provenance; cities implementing air pollution regulations that limit large freight; a post-Covid hospitality industry desperate to improve margins but with limited staff availability to facilitate this in-house. Combined with our innovative model, we’re able to set our sights on not only becoming a European leader in food distribution over the next few years, but even a global one.”

Björn von Sivers, Investment Manager at VNV Global, said: “Collectiv’s innovative managed marketplace connects a fragmented supply of producers with the very fragmented demand of professional kitchens, creating improved transparency amongst other clear network improvements for all stakeholders.”

In his former profession as a Forensic Accountant, Hibbert-Garibaldi came across the business model for Collective after he investigated one of the largest supermarket chains in the UK and their food wholesale leg, mainly for violations of codes of conduct, such as how they were behaving with their suppliers. “I quickly realized that food supply chains were broken, with too much opacity and malpractice, and at the end of the day not benefiting any sides of the marketplace,” he said.

Engrained with a passion for food from his French and Italian origins, he quit his job and spend months in restaurant kitchens to understand the problems they faced: “I wanted to understand why it was so hard for them to source good products, know exactly where their food was coming from, and receive these products reliably and sustainably whenever they needed them. Using this I built my case study to get out to investors and start the business.”

It remains to be seen if Collectiv can scale, or take a chunk out of the vast food supply chain industry, but if it ends up appealing both to suppliers and distributors it will be very interesting to watch.

20 Jul 2021

Carlyle confirms acquisition of live video streaming company LiveU, sources tell us for over $400M

Following our report yesterday of an impending sale of LiveU — one of the big developers of live streaming hardware and software, used by some 3,000 major media organizations — today the company and its buyer Carlyle confirmed the deal.

The seller is Francisco Partners, another PE firm that acquired LiveU just two years ago for $200 million. LiveU and Carlyle are not disclosing the terms of this latest sale, but well-placed sources tell us it’s for over $400 million. Carlyle noted that equity for the investment will be provided by Carlyle Europe Technology Partners (CETP) IV, a fund that invests in middle market technology-focused opportunities in Europe and the U.S. LiveU is based out of Israel, and this is Carlyle’s first tech acquisition in the country.

LiveU’s valuation doubling over two years is partly a reflection of the state of media today. Specifically, video is the centerpiece of how content and information are consumed, and its presence is only growing, and so companies building tools to improve how it is captured and transmitted are hot.

Another fillip to the video market has been the pandemic. LiveU will be used to record and transmit thousands of hours of events from the Tokyo Summer Games, which will be more reliant than ever on live video content given the absence of live audiences for a number of key events.

But it is also due to the fact that LiveU itself is growing and consolidating its position. Most recently, it acquired its channel partner in the UK market, Garland Partners, to build more direct relationships and expand business with its clients in the region.

The company has built out a vertically integrated proposition, which includes not just cameras and other equipment for shooting video, but also encoding equipment to send it, and then hardware for receiving and using the material.

Alongside that, it also has built software to compress data — essential for being able to capture high-quality video yet still being able to transmit it — which works using a hybrid of different kinds of cellular, satellite and other networks.

In short, it’s a resourceful system, which can be used in a modular or all-in deployments, and that flexibility and reliability have led to it signing on some 3,000+ media organizations as customers, who have used it across a number of high-profile events (sporting events and big news events feature strongly) as well as for day-to-day video coverage.

While Francisco has made a relatively quick flip of LiveU as an asset, it sounds like Carlyle might have more strategic plans. The PE firm said it “will use its deep experience in the media tech sector to support LiveU’s growth ambitions.” The company already invests in adjacent companies like Disguise, NEP, The Foundry, Vubiquity, BTI Studios and The Mill. It also sounds like LiveU will be used to help the firm continue the consolidation play.

“Carlyle will seek to further consolidate LiveU’s market position through M&A activity and organic growth while capitalizing on the rapidly growing demand for high-quality live video transmission,” LiveU noted in a statement, adding that this will also include helping forge more media partnerships. The growing ubiquity of 5G will accelerate that trend, it said.

“We’re excited to partner with Carlyle as we look to expand LiveU’s global footprint and service offering. This is a significant milestone for LiveU and represents a strong vote of confidence in our business,” said Samuel Wasserman, CEO and cofounder of LiveU, in a statement. “Carlyle brings deep industry expertise with their track record in the media and technology space alongside a global network. We greatly thank Francisco Partners and IGP Capital for their support and partnership over the last few years.”

“Carlyle has a history of investing in fast-growing and highly innovative, disruptive media technology companies and is truly excited to partner with LiveU which is at the forefront of a rapidly growing market,” added Michael Wand, MD and co-head of the CETP advisory team, in a statement. “Our partnership with the LiveU team will allow us to support their growth, driven by a mixture of expanding into new verticals, targeted M&A activity and through further developing their relationships with key media broadcasters, particularly in live sports where we are witnessing an exploding demand for live content. We believe that the ongoing shift towards high quality real-time video content, the cost advantages of bonded cellular versus alternative transmission technologies, and the opportunity to bring live broadcast to hitherto neglected areas such as semi-pro or non-professional sports, provides an enormous growth potential for LiveU.”

20 Jul 2021

Indian food delivery startup Swiggy raises $1.25 billion led by SoftBank and Prosus

It took SoftBank several years, but finally the Japanese investment giant is ready to bet on India’s food delivery market. Swiggy said on Tuesday it has closed a $1.25 billion financing round led by SoftBank Vision Fund 2 and Prosus Ventures.

The new financing round, a Series J, includes the $800 million investment the Bangalore-based startup had disclosed to employees earlier this year. (SoftBank alone invested $450 million in the new round.) The new round, which Swiggy says was “heavily oversubscribed,” gives the food delivery startup a post-money valuation of $5.5 billion.

TechCrunch had first reported about Swiggy’s engagement with SoftBank and the proposed valuation of $5.5 billion in mid-April. Qatar Investment Authority, Falcon Edge Capital, Amansa Capital, Goldman Sachs, Think Investments and Carmignac and existing investors Accel Partners and Wellington Management also participated in the new round.

Swiggy said the new financing round shows the turnaround it has demonstrated in the past few quarters. Like many other startups, Swiggy was severely hit with the pandemic. The startup said its recent bet to expand into grocery delivery, and pick-up and drop service has paid off. The startup said the volume of orders it is processing now is 30% higher than those in the pre-Covid times.

“The participation of some of the most visionary global investors is a huge vote of confidence in Swiggy’s mission and ability to build an enduring and iconic company out of India. The scope of food delivery in India is massive and over the next few years, we will continue to invest aggressively into growing this category,” said Sriharsha Majety, chief executive of Swiggy, in a statement.

“Our biggest investments will be in our non-food businesses that have witnessed tremendous consumer love and growth in a short span, especially in the past 15 months of the pandemic. I believe the next 10-15 years offer a once-in-a-lifetime opportunity for companies like Swiggy as the Indian middle class expands and our target segment for convenience grows to 500 million users.”

The new investment comes at a time when Indian startups are raising record capital and a handful of mature firms are beginning to explore the public markets. Zomato, Swiggy’s chief rival in India, raised $1.3 billion in its initial public offering last week and financial services startups Paytm and MobiKwik have also filed for their initial public offerings.

At stake is India’s food delivery market, which analysts at Bernstein expect to balloon to be worth $12 billion by 2022, they wrote in a report to clients earlier this year. A third player, Amazon, also entered the food delivery market in India last year, though its operations are still limited to parts of Bangalore. At a virtual conference ahead of the IPO, Zomato executives dismissed Amazon as a serious competitor for now. “There’s no major impact on market share from Amazon so far,” the company’s chief financial officer said.

For SoftBank, a regular fixture of India’s startup, this is the first time it has bet on the food delivery market. The Japanese conglomerate has backed Indian startups in multiple categories including e-commerce (Flipkart, Snapdeal, Meesho, Lenskart, Firstcry), ride-hailing (Uber and Ola), and edtech (Unacademy). SoftBank has invested in several food delivery startups globally including DoorDash and Uber Eats. Prosus Ventures, an early investor in Swiggy, has also backed several food delivery startups globally.

“From its early days, I have had the privilege to watch Swiggy execute on their vision to become the leader in the convenience economy. Their focus on consumer delight, product innovation, and ecosystem support has made Swiggy a compelling digital experience in India. They have the railroads in place to empower multiple businesses to reach the new age consumer on a daily basis, and food delivery is just the beginning,” said Sumer Juneja, Partner at SoftBank Investment Advisers, in a statement.

Swiggy said it will deploy the fresh funds to accelerate its “multi-year strategy” of growing its core food delivery business and building new food and non-food adjacencies this year and beyond.

20 Jul 2021

Choco bites into $100M Series B, at a $600M valuation, to build a more transparent, sustainable food supply chain

The United States estimates of the food produced here approximately 40% is wasted. Globally, $2.6 trillion annually is lost.

Berlin-based Choco, which has built ordering software for restaurants and their suppliers, is working to digitize the food supply chain and announced $100 million in Series B funding, led by Left Lane Capital, to give it a $600 million post-market valuation. Joining in is new investor Insight Partners and existing investors Coatue Management and Bessemer Venture Partners.

The new round comes just over a year after Choco’s $63.7 million Series A, raised at two different periods, a $33.5 million round in 2019 and a $30.2 million round in 2020 — at a $230 million valuation — to bring total funding to $171.5 million since the company was founded in 2018.

The company’s core food procurement technology digitizes ordering workflow and communications for restaurants and suppliers. During the global pandemic, Khachab said Choco became the go-to tool for operators to be more efficient around procurement processes and reducing expenses as they adapted to the changing market conditions.

With the food industry a $6 trillion market, Choco CEO Daniel Khachab told TechCrunch he aims to make the food supply chain more transparent and sustainable in order to help increase margins in the food service sector and combat climate change.

The company did 14 months of food waste research and found that it was central to a lot of other global problems: Food waste is the third-largest driver of climate change and is causing deforestation — as evident by news from the Amazon last year  — and the extinction of animals.

“It makes sense to try and solve it,” he added. “The food system is highly fragile, and what was shown in the first and second waves of the pandemic is how fragile and inflexible it was. It made the industry realize that it has to step up and that it can’t continue to work on pen and paper.”

Between the farmer and the end point, there are some nine parties involved, Khachab said. None are connected to another, which often means nine data silos and data not collected along the chain. It is important to connect them on one single platform so decision-making can be data-driven, he added.

As uncertainty swept across the food industry at the beginning of the pandemic, Khachab said Choco could either lay low and wait or invest in the company. He chose the latter, pumping up the team, regions and technology. As a result, Choco’s technology is stronger than it was 15 months ago and proved to be flexible amid the inflexible environment.

Choco saw orders quadruple on the platform in the past year, and gross merchandise value grew to $900 million annualized, up from $230 million, Khachab said.

As the company continues to learn how it can provide value to the food supply chain, half of the Series B funding will go into technology development. It will also go toward doubling its headcount, especially on the engineering side. Choco recently brought on ex-Uber and Facebook executive Vikas Gupta as chief technology officer, and Khachab said Gupta’s expertise will enable the company “to build the best technology team in Europe” and scale faster.

Choco is already operating in six markets, including the United States, Germany, France, Spain, Austria and Belgium. Khachab expects to expand in those markets and gain a footprint in new markets like Latin America, the Middle East and Asia.

 

20 Jul 2021

YouTube acquires Indian social commerce startup Simsim

YouTube has acquired social commerce startup Simsim, the Google-owned firm said on Tuesday. Neither of the firms disclosed the terms of the deal, but two people with knowledge of the matter told TechCrunch the Indian startup was valued at over $70 million. Simsim founder didn’t respond to a text Monday evening (IST). Two-year-old Simsim had raised about $17 million and was last valued at $50.1 million.

 

20 Jul 2021

Bielefeld survey highlights an emerging B2B, crypto, deep tech ecosystem

Welcome to the city survey of Bielefeld, Germany, part of our ongoing survey into European cities. If you’d like your city featured, just fill in this form and add your city name. Once we have enough entries from a city, we will put your city on TechCrunch!

According to local media reports, Bielefeld’s has experienced a tech boom in recent years, with accelerators like the local Founders Foundation (backed by the Bertelsmann Foundation) and Garage 33 (at the University of Paderborn) attracting a new wave of young company founders to the East Westphalia-Lippe region.

Notable startups to emerge include Semalytix, Valuedesk, Zahnarzt-Helden, StudyHelp, PartWorks and AMendate.

Unfortunately, Bielefeld suffers from the same ailment the rest of Germany is subject to: Most startups gravitate to Berlin, followed by Munich, then Hamburg (according to an initiative from UnternehmerTUM in Munich).

However, as Business Punk magazine found earlier this year, the Ostwestfalen-Lippe region in northern North Rhine-Westphalia is home to some of Germany’s biggest companies. That means startups aiding large organizations to digitize post-pandemic have ready access to some of Germany’s largest companies and institutions.

Our survey respondents pointed out that the region is strong in sectors such as B2B because of the many old-school B2B companies in the manufacturing area. There is fairly ready access to many large family offices such as Dr. Oetker, Miele, CLAAS, Schüco and Bertelsmann, so there is a lot of capital available.

Help TechCrunch find the best growth marketers for startups.

Provide a recommendation in this quick survey and we’ll share the results with everybody.

“The region has a good momentum for startups in general, [largely] because of Founders Foundation. At the same time, them being the only institutional driver leads to a certain monoculture,” said one.

Deep tech technologies are a feature of the ecosystem, but there are “almost no B2C or direct-to-consumer” startups, said another respondent.

Commenting on the investment scene in the city, survey respondents said investors have “strong bonds to the industry and Mittelstand.” However, another commented that there are “only very few local investors with NRW or OWL focus like EnjoyVenture (Technologiefonds OWL), but not much more.”

That said, companies get decent attention from “national” investors, and Founders Foundation has really boosted the scene in the region. Angels are also becoming more active, and “there is a strong business angel community in Bielefeld who have been really supportive of the new startup scene.”

We surveyed:

Jonathan Maycock, co-founder and CEO, margin

Louis Schulze, ecosystem development manager, Founders Foundation

Stefan Trockel, founder and CEO, Mercury.ai

Jasper Steinlechner, CTO, Pektogram

Victoria Erdbrügger, co-founder and managing director, circuly

Manuel Rüsing, CTO, Synctive

Conner Kuhlmeyer, founder, reportio

Miriam Kleiner, talent acquisition manager, Founders Foundation

 


Jonathan Maycock, co-founder and CEO, margin

Which sectors is Bielefeld’s tech ecosystem strong in? What are you most excited by? What does it lack?
We are strong in the cryptotrading ecosystem. We are most excited by the adoption of Bitcoin as a financial asset by corporates and institutions as well as the ongoing network effect and adoption by the masses. We need to add support for DeFi trading venues alongside the centralized exchanges we already support.

Which are the most interesting startups in your city?
Semalytix, Zahnarzt-Helden, Coindex and Valuedesk.

What is the tech investment scene like in Bielefeld? What’s their focus?
Since Founders Foundation started in Bielefeld in 2016 the startup scene has exploded. We joined the first accelerator and since then 24 startups have been founded and come through its programs. There is a strong business angel community in Bielefeld that has been really supportive of the new startup scene.

With the shift to remote working, do you think will people stay in Bielefeld, move out, or will people move in?
We switched completely to home office once the pandemic got underway. For us, it has worked really well and we now have three employees who work outside of Bielefeld. Everything is more flexible now.

Who are the key startup people in your city (e.g., investors, founders, lawyers, designers, etc.)?
Sebastian Borek (CEO of the Founders Foundation), Eduard R. Doerrenberg (managing director, Dr. Wolff Group).

Where do you think Bielefeld’s tech scene will be in five years?
As Bielefeld is in the heart of the German “Mittelstand”, there are huge opportunities for tech startups to help these large industries take a leap forward with technical solutions using AI, blockchain and other technologies. The city is well served by Bielefeld University, which turns out highly qualified CS graduates every year. Especially with the superb backing of the Founders Foundation, the startup ecosystem in Bielefeld has a bright future.

Louis Schulze, ecosystem development manager, Founders Foundation

Which sectors is Bielefeld’s tech ecosystem strong in? What are you most excited by? What does it lack?
B2B, deep tech technologies.

19 Jul 2021

Daily Crunch: In all-stock transaction, Zoom to purchase Five9 for $14.7 billion

To get a roundup of TechCrunch’s biggest and most important stories delivered to your inbox every day at 3 p.m. PDT, subscribe here.

Hello and welcome to Daily Crunch for July 19, 2021. In the old days, venture capital had seasons. VCs didn’t work in December, and the July-August period could be a bit hazy. Such variations have declined. Deal-making, it turns out, is now pretty much the theme for all seasons. Evidence? Just read what’s below! — Alex

The TechCrunch Top 3

  • Rappi raises $500M: The on-demand economy is still hot around the world, something we can know for sure thanks to Rappi’s latest half-billion-dollar raise. The Colombian delivery company is now worth $5.25 billion. That’s a lot of money. Per Crunchbase data, the unicorn has now raised more than $2 billion since inception. Rappi operates in nine countries and 250 cities across Latin America.
  • Zoom buys Five9: Well, the deal got announced at least. It won’t close until next year. But the $14.7 billion transaction has folks talking. It’s a large amount of money, and it’s the combination of two public companies. Both companies, of course, are formerly venture-backed companies, and the deal could help set some pricing notes for other software M&A. TechCrunch has a look at the price of the deal here.
  • Robinhood and Duolingo set prices for their IPOs: If you are into watching the biggest tech companies go public, you are in luck. We got fresh infusions of data from both Robinhood, the U.S. consumer fintech giant, and Duolingo, the U.S. edtech giant. Enjoy!

Startups/VC

  • Sweetch raises $20M to help you get off your backside: If you wear a smartwatch, you’ve gotten notifications from it at the wrong time. A nudge to get up and move, say, when you are seated at a restaurant. Sweetch wants to provide smarter inducements for folks to take better care of themselves, framing it as a way to “outsmart chronic conditions.” Given how much we could all do better at health, I am curious about how this startup performs.
  • Dover raises $20M to make recruiting more organized: Recruiting is not a great process. Mostly it’s done by hand, and managed in spreadsheets, or perhaps a system like Lever. But startups think that there is more room for improvement. Dover is one such company, hoping that its software that helps recruiters “juggle and aggregate multiple candidate pools to source suitable job candidates automatically, and then manage the process of outreach” is just the ticket. And now it has raised from Tiger.
  • Breakr wants to connect musicians and influencers: The days when radio play was the way to break into the mainstream are firmly behind us. Startups like Breakr want to help musical artists navigate the new world by connecting them to folks with their own audiences. Along the way, Breakr will take a 10% cut of fees generated from linking the two parties.
  • Recapped raises $6.3M for better sales software: Akin to how Dover wants to help make recruiting a smoother process, Recapped wants to improve the sales process, namely by building software that provides greater visibility into sales pipelines and by providing buyers with a similar digital interface that it provides to sales folks. Anything to make buying stuff less awful, please!
  • Jones wants to make hiring commercial real estate vendors simpler: If you own a building, hiring folks to do work in or on said building is fraught with liability. Jones just raised $12.5 million to help CME folks “find and hire the people they need in a compliant way.”
  • TechCrunch broke the news that private equity group Carlyle is looking to spend more than $400 million on LiveU, a livestreaming service.

Founders: How well do you really understand seed-stage financing?

A famous poem advises us not to compare ourselves with others, “for always there will be greater and lesser persons than yourself.”

The same holds true for startup fundraising; the size of your seed round will be determined solely by your company’s immediate needs and the investors you’re working with.

“Remember that fundraising is not the goal,” says three-time YC alum Yin Wu. “Building a successful business is.”

If you are an early-stage founder who’s seeking clarity about apportioning equity — or if you’re biting your nails over how much to raise — read this primer. It’s also a useful overview for early employees and co-founders who may be new to startup financing.

  • How financing works: SAFEs versus equity rounds.
  • How much to raise.
  • How to arrive at your valuation.

(Extra Crunch is our membership program, which helps founders and startup teams get ahead. You can sign up here.)

Big Tech Inc.

  • Chaos in lidar-world: The CEO is out at Velodyne, a lidar company that went public via a SPAC. The news follows much other post-SPAC drama, our own Kirsten Korosec reports. In short, going public does not ensure that a company’s ducks will remain in a row after its shares start to trade. Velodyne is now worth just $8.69 per share, down from a high of $32.50.
  • CNN is going +: Yep, another streaming service with a “+” in its name is coming out. This time from cable news pioneer and hoster-of-many-useless-panels CNN. The company is apparently hiring heavily for the effort. CNN, I hereby offer to host a regular TechCrunch show on CNN+. Call me.
  • Uber wants to deliver more carrots: That’s our takeaway from news that the ride-hailing giant is expanding its grocery-delivery service to some 400 new cities. Uber also has earnings coming up, so the timing of this news item isn’t an accident; the company will have something positive to chat about in case its earnings do not delight investors’ expectations regarding its trailing performance.
  • Today in cybersecurity, the United States is pointing a finger at China for “the mass-hacking of Microsoft Exchange servers earlier this year, which prompted the FBI to intervene as concerns rose that the hacks could lead to widespread destruction,” TechCrunch reports. The climate regarding cyber fuckery is changing, with nation-states increasingly content to point a finger at China and Russia for bad behavior.

TechCrunch Experts: Growth Marketing

Illustration montage based on education and knowledge in blue

Image Credits: SEAN GLADWELL (opens in a new window) / Getty Images

Join us tomorrow, July 20, at 5 p.m. ET on Twitter Spaces to hear Danny Crichton and MKT1, who we’ve previously interviewed for TechCrunch Experts, talk about the trends they’re seeing in growth marketing.

Announcing the agenda for the Disrupt Stage in September

We’re excited to give you a closer look at the Disrupt Stage, where the biggest names in tech talk about their companies, their plans and what’s next for the greater tech ecosystem.

19 Jul 2021

GM confirms a third electric pickup truck is in development

GM will add a full-size electric pickup truck to its GMC lineup, the latest in a string of EV product announcements by the automaker in the past year as it pushes to deliver more than 1 million electric vehicles globally by 2025.

The EV pickup was shared in a slide deck during the media presentation and later confirmed to TechCrunch. Duncan Aldred, vice president of global Buick and GMC, didn’t provide further details about the vehicle or when it might go into production.

The GM brand is already aiming to begin production of its GMC Hummer EV in the fourth quarter of this year. The GMC Hummer EV, which will be produced at the company’s Factory ZERO assembly plant in Detroit and Hamtramck, a 350-mile range, 1,000 HP and up to 11,500 pound feet of torque with a starting price of $80,000.

The announcement comes three months after GM announced it would produce an electric Chevrolet Silverado pickup truck, which will also be assembled at the Factory ZERO plant. The Chevrolet Silverado EV pickup will be based on the automaker’s Ultium battery platform and will have an estimated range of more than 400 miles on a full charge.

GM President Mark Reuss said at the time that company is positioning the Chevrolet full-sized pickup for both consumer and commercial markets. The automaker plans to offer retail and fleet versions of the Silverado electric pickup with a variety of options and configurations.

19 Jul 2021

This tool tells you if NSO’s Pegasus spyware targeted your phone

Over the weekend, an international consortium of news outlets reported that several authoritarian governments — including Mexico, Morocco, and the United Arab Emirates — used spyware developed by NSO Group to hack into the phones of thousands of their most vocal critics, including journalists, activists, politicians and business executives.

A leaked list of 50,000 phone numbers of potential surveillance targets was obtained by Paris-based journalism non-profit Forbidden Stories and Amnesty International, and shared with the reporting consortium, including the Washington Post and The Guardian. Researchers analyzed the phones of dozens of victims to confirm they were targeted by the NSO’s Pegasus spyware, which can access all of the data on a person’s phone. The reports also confirm new details of the government customers themselves, which NSO Group closely guards. Hungary, a member of the European Union where privacy from surveillance is supposed to be a fundamental right for its 500 million residents, is named as an NSO customer.

The reporting shows for the first time how many individuals are likely targets of NSO’s intrusive device-level surveillance. Previous reporting had put the number of known victims in the hundreds or over a thousand.

NSO Group sharply rejected the claims. NSO has long said that it doesn’t know who its customers target, which it reiterated in a statement to TechCrunch on Monday.

Researchers at Amnesty, whose work was reviewed by the Citizen Lab at the University of Toronto, found that NSO can deliver Pegasus by sending a victim a link which when opened infects the phone, or silently and without any interaction at all through a “zero-click” exploit, which takes advantage of vulnerabilities in the iPhone’s software. Citizen Lab researcher Bill Marczak said in a tweet that NSO’s zero-clicks worked on iOS 14.6, which until today was the most up-to-date version.

Amnesty’s researchers showed their working by publishing meticulously detailed technical notes and a toolkit that they said may help others identify if their phones have been targeted by Pegasus.

The Mobile Verification Toolkit, or MVT, works on both iPhones and Android devices, but slightly differently. Amnesty said that more forensic traces were found on iPhones than Android devices, which makes it easier to detect on iPhones. MVT will let you take an entire iPhone backup (or a full system dump if you jailbreak your phone) and feed in for any indicators of compromise (IOCs) known to be used by NSO to deliver Pegasus, such as domain names used in NSO’s infrastructure that might be sent by text message or email. If you have an encrypted iPhone backup, you can also use MVT to decrypt your backup without having to make a whole new copy.

The Terminal output from the MVT toolkit, which scans iPhone and Android backup files for indicators of compromise. (Image: TechCrunch)

The toolkit works on the command line, so it’s not a refined and polished user experience and requires some basic knowledge of how to navigate the terminal. We got it working in about ten minutes, plus the time to create a fresh backup of an iPhone, which you will want to do if you want to check up to the hour. To get the toolkit ready to scan your phone for signs of Pegasus, you’ll need to feed in Amnesty’s IOCs, which it has on its GitHub page. Any time the indicators of compromise file updates, download and use an up-to-date copy.

Once you set off the process, the toolkit scans your iPhone backup file for any evidence of compromise. The process took about a minute or two to run and spit out several files in a folder with the results of the scan. If the toolkit finds a possible compromise, it will say so in the outputted files. In our case, we got one “detection,” which turned out to be a false positive and has been removed from the IOCs after we checked with the Amnesty researchers. A new scan using the updated IOCs returned no signs of compromise.

Given it’s more difficult to detect an Android infection, MVT takes a similar but simpler approach by scanning your Android device backup for text messages with links to domains known to be used by NSO. The toolkit also lets you scan for potentially malicious applications installed on your device.

The toolkit is — as command line tools go — relatively simple to use, though the project is open source so not before long surely someone will build a user interface for it. The project’s detailed documentation will help you — as it did us.

Read more:


You can send tips securely over Signal and WhatsApp to +1 646-755-8849. You can also send files or documents using our SecureDrop. Learn more

19 Jul 2021

What we learned from selling a blockchain service to African governments

A major attraction of Africa is its large population of 1.2 billion, which hints at a sizable addressable market. But what happens when your target audience is the governments of 54 countries?

In our situation, that was the case. We started Domineum Blockchain Solutions with the intention to help African governments solve problems with shipping and keeping records.

We knew it’d be hard work, but didn’t anticipate that getting our first customer would be the most difficult part.

It’s typical when entering Africa to want to focus on the big and popular markets like Nigeria, South Africa and Kenya. But what we’ve learned so far is that there’s a high probability that these countries might not be your first entry point.

Our first product was a cargo service that tracks shipment origin and movement and determines the contents of goods being imported or exported in any country. We built this to solve the problem of lost revenue due to shipments being passed through informal backdoor channels.

With our focus on sub-Saharan Africa, we approached four countries in 2019: our home country of Nigeria, plus Kenya, Gambia and Guinea-Conakry.

We started this conversation and didn’t get a substantial response from the four countries’ governments. They weren’t open to trying out our solution — it was new and they weren’t familiar with blockchain technology. Distraught, we decided to add a smaller country to our list: Sierra Leone.

The Freetown seaport, located in the country’s capital, is the main gateway for trade in and out of Sierra Leone, with 80% of trade passing through this port. The port has a long history as a trading hub and benefits from the country’s strategically important location midway between Europe and the Americas.

But Freetown isn’t one of the top ports in Africa or even sub-Saharan Africa; a fraction of a percentage point of the world’s trade shipment flows through its ports. The small African country, with about 0.1% of the world’s population, exports diamonds, cocoa and coffee and imports food, machinery and chemicals.

Notably, it faced big challenges in shipping these products in and out of the country. A Sierra Leonean supply chain manager described this situation, “We used to face big challenges during the export process. There would be long delays at the port. Our trucks would arrive before midnight and could be stuck in queue for hours, even days. The documentation process was so complicated.”

According to the World Bank, Sierra Leone’s “trade challenges can be attributed to several factors: lack of access to trade information; high levels of physical inspections; multiple fees, licenses, permits and certificates; manual processes; and the lack of coordination among agencies.” Domineum set out to solve this.

Our initial conversations with the Sierra Leone government went well. Fortunately, Sierra had developed a five-year plan (2018-2023), supported by the World Bank Group, to reduce the time and costs needed to move goods across its borders. The goal is to reduce trade costs by 10%. After three months of discussion, our cargo tracking system was implemented.

In late 2019, we started this partnership, and so far we’ve been able to capture $2 million in revenue that would have been lost. The business model is simple: We get a 40% commission out of extra revenue we’re able to capture for the Sierra Leone government via our cargo tracking system.

It’s typical when entering Africa to want to focus on the big and popular markets like Nigeria, South Africa and Kenya. But what we’ve learned so far is that there’s a high probability that these countries might not be your first entry point. A business-to-government model is a difficult one. There’s a lot of politicking that goes into working with the government.

What we’ve seen work is to approach other countries and gain a foothold, then use that as validation that the concept works. With the success of Sierra Leone, we’re hoping to return to other countries and get a better reception.

The success of Sierra Leone got us rethinking the services we were offering. The initial conversation started with a cargo tracking service, but then we wondered if we should offer a different service to countries that said no at first.

We identified that land registration was a common problem in Africa. More than 90% of rural land in Africa is undocumented and therefore vulnerable to land-grabbing. This hampers the growth of agriculture and other sectors because land is lost to other parties or taken forcefully by the government during times of conflict.

We returned to these countries, offering other services like land ownership registration via blockchain. We got a positive response from a state government in Nigeria to carry out a pilot program. We’re optimistic that once this pilot phase is over, we’ll be able to seal the next business deal.

What’s it like working with African governments? It’s a smaller addressable market. If you’re looking to pitch a product or service to governments in Africa, it’d be helpful to keep in mind that your first customer might be from a smaller country.

To seize other opportunities, we’ll keep looking to expand to other African countries with this mindset.