In late 2023, an Israeli cybersecurity researcher based in Tel Aviv received recruitment offers through LinkedIn for high-paying jobs abroad. The company representatives claimed to be a legitimate organization focusing on offensive security and starting operations in Barcelona. However, the hiring process raised suspicions for the researcher.
In an interview with TechCrunch, the specialist revealed that the communication with the company was shrouded in secrecy. Some employees refused to disclose full names, withheld the office location, and even the company name. These actions seemed like an attempt to conceal potentially questionable activities.
The company, introduced by Alexei Levin, a former developer at a spy manufacturer for NSO Group, identified itself as Palm Beach Networks. This organization was focused on developing sophisticated spy software, ranging from exploits to surveillance programs.
Barcelona was deliberately chosen by the startup due to its favorable climate, tax benefits, and well-developed IT infrastructure. However, this decision raised concerns given the recent controversies surrounding spyware misuse against politicians and activists in Spain.
Recent years have seen Barcelona emerge as a focal point for companies involved in exploit and espionage program development. Entities like the Paradigm Shift startup, Epsilon founded by a former L3harris employee, and Israeli developers transitioning from Singapore have made the Catalan city a European hub for such organizations.
The migration of companies from Israel to Barcelona is not solely based on climate and tax advantages. Following NSO Group’s scandals, Israeli authorities began restricting the export of espionage technologies, prompting companies to seek jurisdiction within the EU.
However, Palm Beach Networks has rebranded and no longer operates under that name. It has transitioned through multiple legal entities like Defense Prime Inc. and Head and Tail, which continue operations in Spain. Despite Head and Tail’s website claiming involvement in cybersecurity and threat analysis with employees from spy manufacturing backgrounds, they abstain from discussing their actual activities.
The Israeli researcher declined the offer from Palm Beach Networks, citing concerns of facing similar consequences as NSO Group employees, which included social media account blockades and US visa issues. The researcher deemed the risk too high to work for a company with such opaque operations, despite the lucrative salary on offer.