Profile of Tracer, a surveillance tool made by a US firm, that is being resold by Moscow-based OpenGSM and has been tracked by Apple since 2015 say sources
As the infamous tourism tagline for Nevada's gambling paradise goes, what happens in Vegas stays in Vegas. Tweets: @deycrypt , @iblametom , @evacide , and @iblametom . Thanks: @helenaspopkin Tweets: DEY / @deycrypt : Moral of the story, dont jailbreak, dont download / install software outside official repos (App Store or Play Store). http://twitter.com/... Thomas Fox-Brewster / @iblametom : This is documentation of an unprecedented spread of American spyware for Android and iPhone - more than 50 resellers across 10 countries... http://twitter.com/... Eva / @evacide : US-made Killer Mobile spyware resold in Russia by OpenGSM: http://www.forbes.com/... Thomas Fox-Brewster / @iblametom : The Russian company flogging American malware was lurking on the same cybercrime forums as the alleged Yahoo hacker, says @FlashpointIntel http://twitter.com/... Thanks: @helenaspopkin
Context & Ripple Effects
Forbes' profile of Tracer documents an early map of the consumer spyware trade: a US-made tool, tracked by Apple since 2015, moving through more than 50 resellers in 10 countries — with Moscow-based OpenGSM among them. The reporting lands weeks before Motherboard's look at Retina-X and FlexiSpy, which showed the same pattern of ordinary people buying each other's phone taps.
The story matters because it predates the mercenary-spyware era the corpus later charts — from QuaDream's iOS hacks to the DEA's use of Graphite despite US sanctions on the NSO Group. A US firm's product reaching Russian resellers complicates the framing that spyware is a foreign problem.
First-order effects
- iPhone and Android owners who jailbreak or sideload apps are the immediate exposure surface — the tool spreads outside official app stores, as the security researchers cited in the coverage warn.
- OpenGSM gains a ready-made product line by reselling Tracer, while Apple's five-year tracking record gives it grounds to keep flagging the tool inside its own ecosystem.
Second-order effects
- Rivals in the same gray market — FlexiSpy, Retina-X, Killer Mobile — face scrutiny spillover, since documentation of one vendor's reseller web invites investigators to map the others.
- The discovery that American-made spyware flows through Russian channels hands ammunition to critics of the US position on foreign vendors like NSO, pressuring Washington to police domestic suppliers it has largely ignored.
Third-order effects
- If the reseller model holds, spyware becomes a distributed supply chain rather than a handful of vendors — the structure Google's TAG later catalogued when it detailed roughly 40 commercial spyware firms and urged governments to act against the commercial spyware market at large.
- The pattern points toward regulation aimed at the resale layer itself, not just original developers — because takedowns of any single maker leave dozens of distributors intact.
The trend: Commercial spyware is evolving from isolated vendors into a global reseller economy that outlives any single company, forcing platform makers and regulators to target the distribution chain rather than individual tools.