American state agencies accused of hacking French government PCs
Sources claim spyware attack in last days of Sarkozy presidency could only have come from the USA.


The USA has been accused of hacking into the French government's computer network, in what has been called an "unprecedented cyber attack between allies."
The alleged attack took place on 6 May 2012, during the second round of the French presidential election, nine days before Nicolas Sarkozy lost out to Franois Hollande.
A second attack is also claimed to have been carried out on 15 May, the day Hollande took power.
French magazine L'Express claims the initial security breach occurred after one or more workers at the Elyse Palace clicked on a fake intranet link delivered to them via Facebook's messaging service.
Sources told the publication the hackers passed themselves off as friends of people working for the presidential palace, then invited them to connect to the Palace's intranet via a false link.
The attackers were then able to retrieve the user's log-in details and enter the governmental network "in complete confidence".
Using the stolen details, the hackers allegedly deployed a spyware Trojan similar to the Flame malware, which affected computers of the Iranian Oil Ministry.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Flame was jointly developed by the NSA, CIA and Israeli military, according to the Washington Post, and experts speaking to L'Express claim the attack on the Elyse could only have come from the US government.
The worm infected a handful of machines, however L'Expresse claims some of the people highest up in the Sarkozy government were among those affected, including secretary general Zavier Musca.
The president himself only escaped infection as he did not use a PC.
Mitchell Moss, spokesman for the American embassy in Paris, said in a statement: "We categorically refute the allegations ... [that] the government of the United States of America participated in a cyberattack against the French government. France is one of our closest allies."
The French government declined to comment.

Jane McCallion is Managing Editor of ITPro and ChannelPro, specializing in data centers, enterprise IT infrastructure, and cybersecurity. Before becoming Managing Editor, she held the role of Deputy Editor and, prior to that, Features Editor, managing a pool of freelance and internal writers, while continuing to specialize in enterprise IT infrastructure, and business strategy.
Prior to joining ITPro, Jane was a freelance business journalist writing as both Jane McCallion and Jane Bordenave for titles such as European CEO, World Finance, and Business Excellence Magazine.
-
Third time lucky? Microsoft finally begins roll-out of controversial Recall feature
News The Windows Recall feature has been plagued by setbacks and backlash from security professionals
By Emma Woollacott Published
-
The UK government wants quantum technology out of the lab and in the hands of enterprises
News The UK government has unveiled plans to invest £121 million in quantum computing projects in an effort to drive real-world applications and adoption rates.
By Emma Woollacott Published
-
Greek intelligence allegedly uses Predator spyware to wiretap Facebook security staffer
News The employee’s device was infected through a link pretending to confirm a vaccination appointment
By Zach Marzouk Published
-
North Korean-linked Gmail spyware 'SHARPEXT' harvesting sensitive email content
News The insidious software exfiltrates all mail and attachments, researchers warn, putting sensitive documents at risk
By Rory Bathgate Published
-
Young hacker faces 20-year prison sentence for creating prolific Imminent Monitor RAT
News He created the RAT when he was aged just 15 and is estimated to have netted around $400,000 from the sale of it over six years
By Connor Jones Published
-
European company unmasked as cyber mercenary group with ties to Russia
News The company that's similar to NSO Group has been active since 2016 and has used different zero-days in Windows and Adobe products to infect victims with powerful, evasive spyware
By Connor Jones Published
-
Mysterious MacOS spyware discovered using public cloud storage as its control server
News Researchers have warned that little is known about the 'CloudMensis' malware, including how it is distributed and who is behind it
By Rory Bathgate Published
-
Apple launching Lockdown Mode with iOS 16 to guard against Pegasus-style spyware
News Apple breaks its bug bounty record with $2 million top prize, alongside $10 million grant funding, as it launches industry-first protections for highly targeted individuals
By Connor Jones Published
-
El Salvador becomes latest target of Pegasus spyware
News The list of nations with access to Pegasus is growing, with evidence pointing to potential links between 35 confirmed Pegasus cases and the Salvadoran government
By Connor Jones Published
-
Egyptian exiles targeted with Predator spyware resembling NSO Group's Pegasus
News A high-profile politician and journalist have been targeted with spyware likely spread using WhatsApp messages
By Connor Jones Published