“Facebook had acquired Onavo for approximately $120M USD in 2013 and needed to put this technology in good use.”
Onavo Protect had over 10 million Android installs. It carried certificates issued by “Facebook Research” and pushed traffic through a Squid proxy configured for SSL bumping. Court documents name Snapchat, YouTube and Amazon as targets. Facebook bought a privacy app and turned it into a wiretap on its competitors.