{"id":6448,"date":"2024-04-01T22:00:21","date_gmt":"2024-04-01T19:00:21","guid":{"rendered":"https:\/\/ch.jfdi.cc\/?p=6448"},"modified":"2024-04-01T22:00:21","modified_gmt":"2024-04-01T19:00:21","slug":"probe-into-suspicious-share-transfers-in-spyware-affair","status":"publish","type":"post","link":"https:\/\/ch.jfdi.cc\/?p=6448","title":{"rendered":"Probe into suspicious share transfers in spyware affair"},"content":{"rendered":"
<\/div>\n

The anti-money laundering unit (Mokas) is sifting through suspicious transfers of shares in companies registered in Cyprus and linked to the Predator spyware affair, local media reported on Monday.<\/p>\n

\n
\n
\n<\/div>\n<\/div>\n<\/div>\n

According to daily Politis, Mokas is investigating various retroactive transfers of shares within a Cyprus-registered company by the name of Santinomo, which at one point owned 35 per cent of the stock in Intellexa \u2013 the consortium that develops spyware technology and which was sanctioned by the US Treasury last month.
\nSources at Mokas told the daily that once they are done they will forward their findings to the police. It\u2019s understood that Politis itself had dug into the records of the Registrar of Companies and tracked down the retroactive transfers of shares.
\nA draft report by the European Parliament\u2019s Committee of Inquiry investigating the use of Pegasus and equivalent surveillance spyware, dated November 8, 2022, had identified businessman Felix Bitzios as a key player in companies linked to the Intellexa consortium.
\nThe dossier stated: \u201cBitzios is connected with Cyprus through his company Santinomo, registered on Cyprus, and his connection with Tal Dilian.\u201d
\nDilian is an Israeli ex-intelligence officer and the founder of the Intellexa consortium. The US Treasury describes him as \u201cthe architect behind its spyware tools. The consortium is a complex international web of decentralised companies controlled either fully or partially by Dilian, including through Sara Aleksandra Fayssal Hamou.\u201d
\nThe European Parliament report went on: \u201cIt seems that Bitzios has been instrumental in the transfer of Intellexa to Greece. Felix Bitzios owned 35 per cent of the shares of Intellexa, through his company Santinomo. However, on August 4, 2022 he registered the transfer of all his shares to Thalestris, the mother company of Intellexa.
\nThalestris was among the five corporate entities sanctioned by the US Treasury.
\n\u201cWhat is remarkable is not just the date of the registration of the transfer \u2013 just days after the revelations of the Androulakis hack \u2013 but the fact that the transfer supposedly took place on\u00a0 December 18, 2020, over 19 months earlier. Bitzios thus retroactively distanced himself from his Intellexa ownership. Nevertheless, Bitzios had been connected to Intellexa from March 2020 to June 2021 as a deputy administrator.\u201d
\nThe European Parliament report explains that Predator spyware \u201cis sold via Intellexa, a consortium of spyware vendors with presence in Cyprus, Greece, Ireland, and France. Tal Dilian, who had a former career in the Israeli Defence Force, set up the consortium in Cyprus. His second ex-wife Polish citizen Sara Hamou is a central figure in the intricate network of companies. Tal Dilian also has acquired Maltese citizenship.\u201d
\nBack in September 2022, Politis pointed out that the entry changing the ownership in Cyprus-based Santinomo in fact took place on August 4 of that year. This happened just the day before Greek opposition politician Nikos Androulakis was briefed about his phone being hacked by Predator software. The newspaper at the time remarked pointedly whether the timing could plausibly be a coincidence.
\nInside Story \u2013 a media outlet based in Greece \u2013 has for years been pulling on the thread of companies linked to Intellexa and the Predator system. In the autumn of 2022, the outlet produced a shocking reveal. It spoke to two law firms in Nicosia, both of which stated that retroactive changes to company information are not unlawful.
\nThe lawyers said such changes are perfectly regular and legal, but that a company must pay a \u2018fine\u2019 to the Registrar of Companies. A request to amend company information is denied only in the event of conflicting data \u2013 for instance if the change is signed by a company director whom records show that they resigned prior to signing the document in question.
\nAnd according to Politis\u2019 latest findings, on August 31, 2022 an entry was made in the records of Santinomo, where an entity called Finsol Enterprises Limited ceased to be the secretary of Santinomo. But the entry was backdated \u2013 it claimed that the change was made in December 19, 2020. The same backdated entry showed that Bitzios resigned as company director of Santinomo. The new director listed was a Swiss national by the name of Andrea Nicola Costantino Hermes Gambazzi.
\nThen on March 7 of 2024, and only two days after the US Treasury announced the sanctions, there appears another backdated \u2018resignation\u2019 by Gambazzi as director of Santinomo. The purported date of resignation is given again as December 19, 2020. With this entry, Bitzios returns as director.
\nSpeaking earlier to Inside Story, Gambazzi said he was unaware of this, and also that he was not acquainted with Bitzios.
\nIn Cyprus, Dilian was connected to the \u2018spy van affair\u2019. He was the CEO of WiSpear Systems Limited, a company selling surveillance systems. Charges against Dilian were eventually dropped.
\nPolice here began investigating the case in November 2019, after the \u2018spy van\u2019 was showcased in a Forbes report \u2013 where Dilian was essentially advertising his services, which included covert surveillance and eavesdropping.<\/p>\n","protected":false},"excerpt":{"rendered":"

The anti-money laundering unit (Mokas) is investigating suspicious transfers of shares in Cyprus-registered companies linked to the Predator spyware affair.<\/p>\n","protected":false},"author":3,"featured_media":6449,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4],"tags":[2290,3348,3894,616,33,2458,2144,3,2369,1213,499,250,3330,747,546,187,1130,591,148,2952,3576,2628,1060,3331,406,1799,184,1592,2871,2065,3388,331,1806,3798,4577,4576,1682,973,380,2659],"class_list":["post-6448","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyprus","tag-advertising","tag-change","tag-charges","tag-citizenship","tag-companies","tag-connection","tag-consortium","tag-cyprus","tag-data","tag-european-parliament","tag-france","tag-google","tag-google-news","tag-greece","tag-hermes","tag-international","tag-ireland","tag-lawyers","tag-local","tag-media","tag-mokas","tag-money","tag-money-laundering","tag-news","tag-nicosia","tag-parliament","tag-police","tag-registered-companies","tag-request","tag-resignation","tag-sanctioned","tag-sanctions","tag-services","tag-shares","tag-spyware-affair","tag-suspicious-transfers","tag-technology","tag-treasury","tag-us","tag-van"],"acf":{"keyphrase":"","keywords":"","sourceimg":"","country-category":""},"yoast_head":"\nProbe into suspicious share transfers in spyware affair<\/title>\n<meta name=\"description\" content=\"Spyware transfers. money laundering, suspicious transfers, spyware affair\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Probe into suspicious share transfers in spyware affair\" \/>\n<meta property=\"og:description\" content=\"Spyware transfers. money laundering, suspicious transfers, spyware affair\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ch.jfdi.cc\/?p=6448\" \/>\n<meta property=\"og:site_name\" content=\"ch.jfdi.cc\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-01T19:00:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ch.jfdi.cc\/wp-content\/uploads\/2024\/04\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"768\" \/>\n\t<meta property=\"og:image:height\" content=\"484\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cyprus Mail\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cyprus Mail\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448\"},\"author\":{\"name\":\"Cyprus Mail\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/#\\\/schema\\\/person\\\/606e0fbe40ab1cad97176ec3e4e248f8\"},\"headline\":\"Probe into suspicious share transfers in spyware affair\",\"datePublished\":\"2024-04-01T19:00:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448\"},\"wordCount\":805,\"image\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ch.jfdi.cc\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg\",\"keywords\":[\"advertising\",\"change\",\"charges\",\"citizenship\",\"Companies\",\"connection\",\"consortium\",\"Cyprus\",\"data\",\"european parliament\",\"france\",\"Google\",\"Google News\",\"Greece\",\"Hermes\",\"International\",\"ireland\",\"lawyers\",\"Local\",\"media\",\"MOKAS\",\"money\",\"money laundering\",\"news\",\"Nicosia\",\"parliament\",\"Police\",\"registered companies\",\"request\",\"resignation\",\"sanctioned\",\"sanctions\",\"services\",\"shares\",\"spyware affair\",\"suspicious transfers\",\"technology\",\"Treasury\",\"US\",\"van\"],\"articleSection\":[\"Cyprus\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448\",\"url\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448\",\"name\":\"Probe into suspicious share transfers in spyware affair\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ch.jfdi.cc\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg\",\"datePublished\":\"2024-04-01T19:00:21+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/#\\\/schema\\\/person\\\/606e0fbe40ab1cad97176ec3e4e248f8\"},\"description\":\"Spyware transfers. money laundering, suspicious transfers, spyware affair\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#primaryimage\",\"url\":\"https:\\\/\\\/ch.jfdi.cc\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg\",\"contentUrl\":\"https:\\\/\\\/ch.jfdi.cc\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg\",\"width\":768,\"height\":484,\"caption\":\"Probe into suspicious share transfers in spyware affair\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/?p=6448#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ch.jfdi.cc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Probe into suspicious share transfers in spyware affair\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/#website\",\"url\":\"https:\\\/\\\/ch.jfdi.cc\\\/\",\"name\":\"ch.jfdi.cc\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ch.jfdi.cc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ch.jfdi.cc\\\/#\\\/schema\\\/person\\\/606e0fbe40ab1cad97176ec3e4e248f8\",\"name\":\"Cyprus Mail\",\"sameAs\":[\"https:\\\/\\\/cyprus-mail.com\\\/\"],\"url\":\"https:\\\/\\\/ch.jfdi.cc\\\/?author=3\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Probe into suspicious share transfers in spyware affair","description":"Spyware transfers. money laundering, suspicious transfers, spyware affair","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_GB","og_type":"article","og_title":"Probe into suspicious share transfers in spyware affair","og_description":"Spyware transfers. money laundering, suspicious transfers, spyware affair","og_url":"https:\/\/ch.jfdi.cc\/?p=6448","og_site_name":"ch.jfdi.cc","article_published_time":"2024-04-01T19:00:21+00:00","og_image":[{"width":768,"height":484,"url":"https:\/\/ch.jfdi.cc\/wp-content\/uploads\/2024\/04\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg","type":"image\/jpeg"}],"author":"Cyprus Mail","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cyprus Mail","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ch.jfdi.cc\/?p=6448#article","isPartOf":{"@id":"https:\/\/ch.jfdi.cc\/?p=6448"},"author":{"name":"Cyprus Mail","@id":"https:\/\/ch.jfdi.cc\/#\/schema\/person\/606e0fbe40ab1cad97176ec3e4e248f8"},"headline":"Probe into suspicious share transfers in spyware affair","datePublished":"2024-04-01T19:00:21+00:00","mainEntityOfPage":{"@id":"https:\/\/ch.jfdi.cc\/?p=6448"},"wordCount":805,"image":{"@id":"https:\/\/ch.jfdi.cc\/?p=6448#primaryimage"},"thumbnailUrl":"https:\/\/ch.jfdi.cc\/wp-content\/uploads\/2024\/04\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg","keywords":["advertising","change","charges","citizenship","Companies","connection","consortium","Cyprus","data","european parliament","france","Google","Google News","Greece","Hermes","International","ireland","lawyers","Local","media","MOKAS","money","money laundering","news","Nicosia","parliament","Police","registered companies","request","resignation","sanctioned","sanctions","services","shares","spyware affair","suspicious transfers","technology","Treasury","US","van"],"articleSection":["Cyprus"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/ch.jfdi.cc\/?p=6448","url":"https:\/\/ch.jfdi.cc\/?p=6448","name":"Probe into suspicious share transfers in spyware affair","isPartOf":{"@id":"https:\/\/ch.jfdi.cc\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ch.jfdi.cc\/?p=6448#primaryimage"},"image":{"@id":"https:\/\/ch.jfdi.cc\/?p=6448#primaryimage"},"thumbnailUrl":"https:\/\/ch.jfdi.cc\/wp-content\/uploads\/2024\/04\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg","datePublished":"2024-04-01T19:00:21+00:00","author":{"@id":"https:\/\/ch.jfdi.cc\/#\/schema\/person\/606e0fbe40ab1cad97176ec3e4e248f8"},"description":"Spyware transfers. money laundering, suspicious transfers, spyware affair","breadcrumb":{"@id":"https:\/\/ch.jfdi.cc\/?p=6448#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ch.jfdi.cc\/?p=6448"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/ch.jfdi.cc\/?p=6448#primaryimage","url":"https:\/\/ch.jfdi.cc\/wp-content\/uploads\/2024\/04\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg","contentUrl":"https:\/\/ch.jfdi.cc\/wp-content\/uploads\/2024\/04\/probe-into-suspicious-share-transfers-in-spyware-affair.jpg","width":768,"height":484,"caption":"Probe into suspicious share transfers in spyware affair"},{"@type":"BreadcrumbList","@id":"https:\/\/ch.jfdi.cc\/?p=6448#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ch.jfdi.cc\/"},{"@type":"ListItem","position":2,"name":"Probe into suspicious share transfers in spyware affair"}]},{"@type":"WebSite","@id":"https:\/\/ch.jfdi.cc\/#website","url":"https:\/\/ch.jfdi.cc\/","name":"ch.jfdi.cc","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ch.jfdi.cc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/ch.jfdi.cc\/#\/schema\/person\/606e0fbe40ab1cad97176ec3e4e248f8","name":"Cyprus Mail","sameAs":["https:\/\/cyprus-mail.com\/"],"url":"https:\/\/ch.jfdi.cc\/?author=3"}]}},"_links":{"self":[{"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=\/wp\/v2\/posts\/6448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6448"}],"version-history":[{"count":0,"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=\/wp\/v2\/posts\/6448\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=\/wp\/v2\/media\/6449"}],"wp:attachment":[{"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6448"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6448"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ch.jfdi.cc\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}