{"id":168586,"date":"2025-12-17T14:25:07","date_gmt":"2025-12-17T11:25:07","guid":{"rendered":"https:\/\/pozirk.online\/en\/news\/168586\/"},"modified":"2026-03-09T20:10:49","modified_gmt":"2026-03-09T20:10:49","slug":"belarus-kgb-using-residentbat-spyware-to-target-journalists","status":"publish","type":"articles","link":"https:\/\/pozirk.online\/en\/news\/168586\/","title":{"rendered":"Belarus\u2019 KGB using ResidentBat spyware to target journalists"},"content":{"rendered":"\n
\n\n \"\"\n
\n \n
\n (Sputnik)<\/span>\n <\/div>\n <\/figcaption>\n<\/figure>\n\n\n\n

December 17,\u00a0Pozirk.<\/em> <\/strong>Belarus\u2019 Committee for State Security (KGB) has been using the ResidentBat spyware since 2021 to target, among others, journalists, found<\/a> Reporters Without Borders (RSF)\u2019s Digital Security Lab (DSL), working with the Eastern European organization RESIDENT.NGO.<\/p>\n\n\n\n

ResidentBat was detected on the smartphone of a journalist who had been questioned by the KGB. RSF has verified the person\u2019s identity but is not publishing it for security reasons.<\/p>\n\n\n\n

Before the interrogation at KGB premises, the individual was asked to place the smartphone in a locker. During questioning, the journalist was required to show content on the device and unlocked the phone in an officer\u2019s presence. Afterwards, the device was placed in the locker again. The individual and RSF believe that the security forces observed the PIN entry, retrieved the phone during the interrogation and installed the spyware.<\/p>\n\n\n\n

A few days later, antivirus software flagged suspicious components on the device. The individual contacted RESIDENT.NGO, which carried out a forensic analysis together with RSF\u2019s DSL.<\/p>\n\n\n\n

The spyware targets Android smartphones and enables access to highly sensitive data. Unlike well-known spyware products used against journalists such as Pegasus, ResidentBat does not exploit digital vulnerabilities. Instead, it is installed after security forces gain physical access to a device. Once installed, ResidentBat enables access to call logs, microphone recordings, screen captures, SMS messages, messages from encrypted messaging apps, and locally stored files.<\/p>\n\n\n\n

It is not yet clear who developed ResidentBat. Parts of the code contain English-language strings, suggesting it may be a product not designed exclusively for use in Belarus, or developed by a third party. <\/p>\n\n\n\n

\u201cBy deploying surveillance technologies such as ResidentBat, the Belarusian state is pursuing a deliberate strategy of repression against independent journalism,\u201d said Antoine Bernard of RSF.<\/p>\n\n\n\n

At present, 32 journalists are imprisoned, and reports of torture are increasing. Many have fled the country since 2020 and work from exile. Those who continue to report from within Belarus often do so anonymously and at considerable personal risk.<\/p>\n\n\n\n

\n\n
\n \"\"
\n

Absence of father is something we\u2019ll never accept \u2013 Pa\u010dobut\u2019s daughter<\/h3>\n
December 16, Pozirk. \u201cThe absence of our father is something we have learned to live with but will never accept. We have not chosen this path, but we did choose daily faith in our father and in the fact that truth …<\/div>\n \n