After being accused by Microsoft, an Austrian firm clarifies that it used Subzero for EU states only

On Saturday, after Microsoft alleges an Austrian spy firm of making malicious software that was detected on the computer systems of some of its clients in at least three countries, the firm says that its hacking tool “Subzero” was for official use in the European Union (EU) states only.

Microsoft on Wednesday believes that the firm, DSIRF, had deployed the spying software, or spyware – capable of accessing personal information such as passwords or logon credentials – at an unspecified number of unidentified banks, law firms, and strategic consultancies.

DSIRF in an emailed statement states that Subzero is a software of the Austrian DSIRF GesmbH, which has been created only for official use in EU states. It is neither provided, sold nor made available for commercial use.

“In view of the facts described by Microsoft, DSIRF resolutely rejects the impression that it has misused Subzero software,” it further adds.

It was not unclear which EU member state governments if any, were using the spying tool. DSIRF has not responded to requests for further comment.

On Friday, Austria’s interior ministry told APA, that it was investigating the Microsoft claims. The ministry did not respond to requests from Reuters for comment.

Spyware tools have come into more focus in Europe and the United States after Pegasus, spyware developed by Israel’s NSO was discovered to have been used by governments to spy on journalists and dissidents.