\n<\/p>\n
On Monday, the<\/span> Biden administration announced that six new countries had joined an international coalition<\/a> to fight the proliferation of commercial spyware, sold by companies such as NSO Group or Intellexa.<\/p>\n Now, some investors have announced that they too are committed to fighting spyware. But at least one of those investors, Paladin Capital Group, has previously invested in a company that developed malware, according to a leaked 2021-dated slide deck obtained by TechCrunch, although the firm tells TechCrunch it \u201cgot out\u201d of the firm some time ago.<\/p>\n In the last couple of years, the U.S. government has led an effort to limit or at least restrain the use of spyware across the world by putting surveillance tech makers like NSO Group, Candiru and Intellexa on blocklists<\/a>, as well as imposing export controls<\/a> on those companies and visa restrictions<\/a> on people involved in the industry. More recently, the government has imposed economic sanctions not only on companies, but also directly on the executive who founded Intellexa<\/a>. These actions have put others in the spyware industry on alert<\/a>.<\/p>\n In a call with reporters on Monday that TechCrunch attended, a senior Biden administration official said that a representative from Paladin participated in meetings at the White House on March 7, as well as this week in Seoul, where governments gathered for the Summit for Democracy to discuss spyware.<\/p>\n Paladin, one of the biggest investors in cybersecurity startups, and several other venture firms published a set of voluntary investment principles<\/a>, noting that they would invest in companies that \u201cenhance the defense, national security, and foreign policy interests of free and open societies.\u201d<\/p>\n \u201cFor us, it was an important first step in having an investor outline both recognition that investments should not be going towards companies that are undertaking selling products, and selling to clients that can undermine free and fair societies,\u201d the senior administration official said in the call, where journalists agreed not to quote the officials by name.<\/p>\n To hear some of these investors talk, you\u2019d think that spyware has no place in a free and open society.<\/p>\n In an interview with TechCrunch, Michael Steed, founder and managing partner at Paladin, explained the firm\u2019s thought process when considering investing in a cybersecurity company. \u201cCould this technology be utilized in the commercial spyware area?\u201d he asked rhetorically. \u201cWe\u2019re looking at those technologies in a way in which we\u2019re looking to protect the economic, national security and foreign policy interests in a free and open society.\u201d<\/p>\n Yet, in the past, Paladin invested in Boldend, a little-known offensive cybersecurity startup founded in 2017 and based in California.<\/p>\n Among several other products, Boldend claims to have developed an \u201call-in-one malware platform\u201d called Origen, which \u201cenables the easy creation of any piece of malware for any platform,\u201d according to the leaked slide deck.<\/p>\n Boldend advertised Origen as \u201ccapable of automating any conceivable attack\u201d against Windows, Linux, Mac and Android devices, describing Origen informally as a \u201cdevice management tool.\u201d In another slide, Boldend said a future goal of Origen was to perform \u201cautomatic compromise, lateralization, and forensic removal.\u201d<\/p>\n In other words, this is Boldend\u2019s platform for hacking into and extracting data from someone\u2019s device.<\/p>\n \t\tDo you know more about Boldend? Or about spyware providers? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram, Keybase and Wire @lorenzofb, or email<\/a>.<\/a> You also can contact TechCrunch via SecureDrop<\/a>.\t<\/div>\n Steed said that Paladin no longer invests in Boldend, though he declined to explain why. Steed did not respond to follow-up questions attempting to clarify how Paladin\u2019s relationship with Boldend ended.<\/p>\n \u201cIt didn\u2019t do what we wanted it to do. So we got out of it,\u201d Steed told TechCrunch.<\/p>\n Boldend did not respond to a request for comment. The startup\u2019s website is barebones and says little about what the company does. When reached by TechCrunch in October 2023, Boldend\u2019s board member Mike Barry, now listed on LinkedIn as the company\u2019s chief executive, said that the startup was \u201cvery much alive and well.\u201d<\/p>\n In the leaked slide deck, Boldend claims to have sold its \u201ccyber munitions and expertise\u201d to Raytheon, Novetta, FEDDATA, the Department of Defense, the U.S. Cyber Command and more broadly, the intelligence community. Boldend also said it got funding from Founders Fund, the massive venture capital firm led by Peter Thiel, and Gula Tech Adventures.<\/p>\n The leaked slides outline several different products. Apart from Origen, there\u2019s Kevlar, an automated platform to analyze implants; Hedgemaze, an obfuscated traffic routing platform to manage infrastructure; and Cricket, a portable hardware platform to launch Wi-Fi-based attacks.<\/p>\n Boldend states in the slides that it hoped to develop software for \u201cfull turn-key cyber operations\u201d like offensive cyber capabilities, electronic warfare and signals intelligence; hack-back services sanctioned by the U.S. government; and an AI platform \u201cto dynamically identify, exploit, build infrastructure, as well as create online personas to perform a variety of intelligence tasks while maintaining forensic integrity,\u201d including creating and diffusing \u201cfake news story with social media.\u201d<\/p>\n In one of the slides, Boldend claims that it developed tools to gain \u201cremote access into all WhatsApp on all Android.\u201d And that it spent a year developing that capability, but it \u201cgot burned by an update.\u201d The New York Times first reported Boldend\u2019s creation of the WhatsApp exploit<\/a>.<\/p>\n Gula Tech, which also invested in Boldend, also signed the principles and commitments published by Paladin. Ron Gula, the president and co-founder of Gula Tech, declined to comment for this article.<\/p>\n Gula Tech and Paladin\u2019s investment in Boldend \u2014 effectively a U.S.-based exploit and hacking software maker \u2014 and the two investment firms\u2019 commitment to not invest in spyware companies might seem at odds. But the investors\u2019 pledge leaves the door open for investing in certain companies, if they serve the interests of the United States, and \u201cfree and open societies.\u201d<\/p>\n Exactly how far do those principles stretch as it relates to other countries that are close allies of the United States but with histories of potential human rights violations? Does that mean, for example, that Paladin wouldn\u2019t invest in companies based in Saudi Arabia or Israeli companies? Steed would not commit to a direct answer.<\/p>\n \u201cIf you talk to Israel, you talk to Saudi, they would tell you that they\u2019re free and open societies and they are the allies of the United States. We still are very careful. No matter whether it\u2019s Israel, or Saudi, or France or Germany, we\u2019re still very careful about what we invest in,\u201d said Steed. \u201cTo make sure that we\u2019re not violating the free and open society concept.\u201d<\/p>\nContact Us<\/h4>\n