“The DoJ isn’t alleging that Oxygen’s software contained malicious code or was used to gain unauthorized access to customer systems or data.”

Police forces on two continents bought a phone-cracking tool without asking who owned it. US prosecutors say the answer was Russia, with development in Moscow. DoD and DHS bought it too. The Met says it used the software in under 0.2% of its cases, which is still dozens of seized phones run through it.