Dutch spies monitored Jared Kushner’s iPhone using stolen Russian GRU techniques

Dutch intelligence services successfully monitored the screen of Jared Kushner’s iPhone by utilizing a hacking technique originally developed by Russian military intelligence.

The risk

According to an excerpt from Matthew Cole’s book Princes and Thieves, published in Vanity Fair, Dutch intelligence captured a Russian GRU hacker in late 2017. By year’s end, the operative provided access to a GRU server containing screenshots of Kushner’s iPhone X. The Dutch team reverse-engineered the method used to breach the device’s security. This allowed them to view a continual image feed of the phone’s screen, though without audio.

Who is exposed

The surveillance roughly coincided with a period when Kushner allegedly used a personal cell phone for official government business. He reportedly used private email, allegedly routed to Trump Organization servers in 2017, and received Top Secret intelligence without a permanent security clearance. In early 2018, Dutch personnel identified him logging into a Dubai-based bank account that had received approximately $750 million.

Cost and compliance

Cole reported that the account, known as the Alpha account, belonged to the Watani Al Emarat Foundation, a UAE-based entity funded by the government. The account was held at First Abu Dhabi Bank, which is chaired by the brother of UAE leader Mohamed bin Zayed. A source described the arrangement to Cole as a shared pool of money for off-the-books diplomatic objectives, with contributions from MBZ and Saudi Crown Prince Mohammed bin Salman.

What should you do?

Review personal device policies to ensure official business is not conducted on unsecured hardware. Verify that all communications containing sensitive information use approved, encrypted channels provided by the organization.

The background in plain language

Intelligence agencies often repurpose exploits discovered by other groups to gain access to high-value targets. When a device is compromised, attackers can often view the screen in real time, allowing them to read emails, messages, and banking details as they appear. This method bypasses traditional network defenses because the data is captured directly from the device interface rather than intercepted in transit. Teams usually assume that if a device is physically secure, the data is safe, but remote screen access negates that protection.

What to do and how to stay safe: Jared Kushner

• Audit mobile device management policies to ensure personal phones are not used for handling classified or sensitive government data.
• Implement strict separation between personal and professional communication channels, using only organization-provided secure devices for official business.
• Monitor for unusual login activity on financial or sensitive accounts, especially when using devices that may have been previously compromised.
• Review security clearance protocols to ensure individuals handling Top Secret information possess the appropriate permanent clearances and use approved secure systems.

Step-by-step guide: Browser security settings are the architectural walls of your digital life

General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How did the Dutch intelligence agents gain access to the iPhone?

They captured a Russian GRU operative who provided access to a server containing the exploit used to compromise the device.

What specific information did the Dutch spies observe on the phone?

They observed a continual image feed of the screen, including login activity for a Dubai-based bank account.

Was audio captured during the surveillance?

No, the monitoring provided a visual feed of the screen but did not include audio.