Security Affairs

APRIL 1, 2023

CISA has added nine flaws to its Known Exploited Vulnerabilities catalog, including bugs exploited by commercial spyware on mobile devices. The exploits were used to install commercial spyware and malicious apps on targets’ devices. The experts pointed out that both campaigns were limited and highly targeted.

Spyware 82

Spyware Surveillance Cybersecurity Hacking 82

Security Affairs

NOVEMBER 11, 2022

Lookout researchers discovered two long-running surveillance campaigns targeting the ethnic minority Uyghurs. Researchers from mobile security firm Lookout uncovered two long-running surveillance campaigns targeting the Uyghurs minority. List of installed packages. Call logs and geocoded location associated with the call.

Spyware 92

Spyware Surveillance Malware Hacking 92

Security Affairs

MARCH 3, 2023

The phone of an opposition-linked Polish mayor was infected with the powerful Pegasus spyware, local media reported. Reuters reported that the phone of an opposition-linked Polish mayor was infected with the Pegasus spyware. According to rumors, the Polish special services are using surveillance software to spy on government opponents.

Spyware 92

Spyware Surveillance Hacking Government 92

Security Affairs

JULY 22, 2022

The spyware developed by Israeli surveillance firm Candiru exploited recently fixed CVE-2022-2294 Chrome zero-day in attacks on journalists. After getting a foothold on the victim’s machine, the DevilsTongue spyware attempts to elevate its privileges by exploiting another zero-day exploit. ” concludes the report.

Spyware 91

Spyware Surveillance Antivirus Malware 91

Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Spyware 97

Spyware Surveillance Malware Telecommunications 97

Security Affairs

NOVEMBER 30, 2022

Google’s Threat Analysis Group (TAG) linked three exploitation frameworks to a Spanish surveillance spyware vendor named Variston. While tracking the activities of commercial spyware vendors, Threat Analysis Group (TAG) spotted an exploitation framework likely linked Variston IT, a Spanish firm. ” TAG concludes.

Spyware 122

Spyware Surveillance Hacking Risk 122

Tech Republic Security

MAY 20, 2022

A commercial surveillance company previously exposed for selling a spyware service dubbed "Predator" keeps targeting users and uses 0-day exploits to compromise Android phones. The post Packaged zero-day vulnerabilities on Android used for cyber surveillance attacks appeared first on TechRepublic.

Surveillance 192

Surveillance Spyware Mobile 192

SecureWorld News

MARCH 29, 2023

United States President Joe Biden has signed an Executive Order banning commercial spyware from government agencies. The order comes in response to growing concerns about the use of such software to conduct surveillance and espionage operations.

Spyware 78

Spyware Government Surveillance Cybersecurity 78

Security Affairs

FEBRUARY 17, 2022

The European Data Protection Supervisor authority called for a ban on the development and the use of Pegasus-like commercial spyware. The European Data Protection Supervisor (EDPS) authority this week called for a ban on the development and the use of surveillance software like the Pegasus spyware in the EU. Pierluigi Paganini.

Spyware 76

Spyware Surveillance Hacking Malware 76

Security Affairs

MAY 1, 2023

Researchers at the Lookout Threat Lab have discovered a new Android surveillance spyware, dubbed BouldSpy, that was used by the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). However, much of the victim data points to its broader usage, which indicates targeted surveillance efforts towards minorities within Iran.”

Surveillance 81

Surveillance Malware Spyware Hacking 81

Schneier on Security

JULY 19, 2022

We forensically confirmed that at least 30 individuals were infected with NSO Group’s Pegasus spyware. We discovered an extensive espionage campaign targeting Thai pro-democracy protesters, and activists calling for reforms to the monarchy. The observed infections took place between October 2020 and November 2021. More details.

Spyware 199

Spyware Surveillance Hacking Government 199

Security Affairs

MAY 23, 2022

We assess the exploits were packaged by a single commercial surveillance company, Cytrox, and sold to different govt-backed actors. The attacks aimed at installing the surveillance spyware Predator, developed by the North Macedonian firm Cytrox. link] — Shane Huntley (@ShaneHuntley) May 19, 2022. Pierluigi Paganini.

Spyware 140

Spyware Surveillance Hacking Government 140

Malwarebytes

MAY 24, 2022

The Google Threat Analysis Group (TAG) has revealed that of the nine zero-day vulnerabilities affecting Chrome, Android, Apple and Microsoft that it reported in 2021, five were in use by a single commercial surveillance company. Government spyware. Did I hear someone say Pegasus ? An educated guess, but wrong in this case.

Spyware 142

Spyware Surveillance Government Software 142

CSO Magazine

MARCH 31, 2023

Several commercial spyware vendors developed and used zero-day exploits against iOS and Android users last year. Our findings underscore the extent to which commercial surveillance vendors have proliferated capabilities historically only used by governments with the technical expertise to develop and operationalize exploits."

Spyware 138

Spyware Surveillance Mobile Manufacturing 138

Security Affairs

JULY 19, 2021

Pegasus Project investigation into the leak of 50,000 phone numbers of potential surveillance targets revealed the abuse of NSO Group’s spyware. Pegasus Project is the name of a large-scale investigation into the leak of 50,000 phone numbers of potential surveillance targets that revealed the abuse of NSO Group’s spyware.

Spyware 135

Spyware Government Surveillance Malware 135

Schneier on Security

AUGUST 5, 2019

Deibert, and John Scott-Railton of Citizen Lab published an editorial calling for regulating the international trade in commercial surveillance systems until we can figure out how to curb human rights abuses. The purchase of surveillance technology by law enforcement in any state must be transparent and subject to public debate.

Spyware 210

Spyware Surveillance Accountability Government 210

Adam Levin

MAY 15, 2019

WhatsApp disclosed a major security vulnerability that allowed hackers to remotely install spyware on mobile devices. The spyware deployed has been traced back to NSO Group, an Israeli cyber company alleged to have enabled Middle East governments to surveil its citizens. NSO Group has denied involvement.

Spyware 200

Spyware Surveillance Encryption Mobile 200

Schneier on Security

AUGUST 3, 2021

Forbes has the story : Paragon’s product will also likely get spyware critics and surveillance experts alike rubbernecking: It claims to give police the power to remotely break into encrypted instant messaging communications, whether that’s WhatsApp, Signal, Facebook Messenger or Gmail, the industry sources said.

Spyware 363

Spyware Encryption Manufacturing Surveillance 363

Bleeping Computer

MAY 22, 2022

Google's Threat Analysis Group (TAG) says that state-backed threat actors used five zero-day vulnerabilities to install Predator spyware developed by commercial surveillance developer Cytrox. [.].

Spyware 145

Spyware Surveillance 145

Security Affairs

NOVEMBER 8, 2021

A Hungarian government official confirmed that his government has bought and used the controversial NSO Group’s Pegasus spyware. According to Kosa, the use of surveillance software was authorized by a judge or the Minister of Justice. SecurityAffairs – hacking, surveillance. ” This week, the U.S. Pierluigi Paganini.

Spyware 119

Spyware Surveillance Hacking Malware 119

Security Affairs

AUGUST 6, 2022

Greek intelligence admitted it had spied on a journalist, while citizens ask the government to reveal the use of surveillance malware. The head of the Greek intelligence told a parliamentary committee that they had spied on a journalist with surveillance malware , Reuters reported citing two sources present. ” reported Reuters.

Surveillance 127

Surveillance Malware Spyware Hacking 127

The Hacker News

SEPTEMBER 23, 2022

A new wave of a mobile surveillance campaign has been observed targeting the Uyghur community as part of a long-standing spyware operation active since at least 2015, cybersecurity researchers disclosed Thursday.

Spyware 123

Spyware Mobile Surveillance Malware 123

Security Affairs

DECEMBER 3, 2021

Apple warns that the mobile devices of at least nine US Department of State employees were compromised with NSO Group ‘s Pegasus spyware. The iPhones of at least nine US state department officials were compromised with the NSO Group’s spyware Pegasus. “Apple Inc iPhones of at least nine U.S.

Spyware 125

Spyware Surveillance Hacking Malware 125

Security Affairs

AUGUST 2, 2022

Austria is investigating a report that an Austrian firm DSIRF developed spyware targeting law firms, banks and consultancies. The group targets entities in Europe and Central America with a surveillance tool dubbed Subzero. Microsoft reported Subzero attacks against Microsoft customers in Austria, the United Kingdom, and Panama.

Spyware 96

Spyware Surveillance Hacking Malware 96

Security Affairs

MARCH 29, 2023

Google’s Threat Analysis Group (TAG) discovered several exploit chains targeting Android, iOS, and Chrome to install commercial spyware. The exploit chains were used to install commercial spyware and malicious apps on targets’ devices. The experts pointed out that both campaigns were limited and highly targeted.

Spyware 88

Spyware Surveillance Hacking Firmware 88

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. TAG researchers tracked more than 30 vendors selling exploits or surveillance capabilities to nation-state actors. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Surveillance 131

Surveillance Spyware Mobile Hacking 131

Security Affairs

APRIL 19, 2022

Researchers from Citizen Lab have published a report detailing the use of a new zero-click iMessage exploit, dubbed HOMAGE, to install the NSO Group Pegasus spyware on iPhones belonging to Catalan politicians, journalists, academics, and activists. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook.

Spyware 113

Spyware Surveillance Hacking Government 113

Security Affairs

APRIL 13, 2022

According to a report published by Reuters, an Israeli surveillance software was used to spy on senior officials in the European Commission. One of the officials targeted with the infamous spyware there is Didier Reynders, a senior Belgian statesman who has served as the European Justice Commissioner since 2019. Pierluigi Paganini.

Surveillance 109

Surveillance Spyware Software Hacking 109

Malwarebytes

JULY 22, 2021

Pegasus is spyware, and spyware is not made to respect privacy. According to NSO Group, its main spyware program is a beneficial tool for investigating and preventing terrorist attacks and maintaining the safety of the public. And between 2016 and 2018, more than 1,000 IP addresses were found to be associated with it.

Spyware 138

Spyware Surveillance Hacking Encryption 138

CyberSecurity Insiders

JUNE 23, 2022

Google Threat Analysis team has discovered a new spyware tool that was being fraudulently installed on iPhones and Android devices by a group of hackers in Italy. The tech search giant revealed the information and threw some light on how the spyware industry was flourishing.

Spyware 119

Spyware Malware Cybersecurity Surveillance 119

Security Affairs

AUGUST 28, 2022

Leaked documents show the surveillance firm Intellexa offering exploits for iOS and Android devices for $8 Million. Intellexa is an Israeli surveillance firm founded by Israeli entrepreneur Tal Dilian, it offers surveillance and hacking solution to law enforcement and intelligence agencies. Pierluigi Paganini.

Surveillance 144

Surveillance Spyware Hacking Mobile 144

Heimadal Security

MARCH 28, 2023

At least 50 US government officials are either suspected or confirmed to have been targeted by invasive commercial spyware designed to hack mobile phones, extract data, and track the movements of the victims. Government Restricts the Use of Spyware, White House Says appeared first on Heimdal Security Blog.

Spyware 67

Spyware Government Surveillance Hacking 67

Security Affairs

NOVEMBER 9, 2022

Google Project Zero researchers reported that a surveillance vendor is using three Samsung phone zero-day exploits. Google Project Zero disclosed three Samsung phone vulnerabilities, tracked as CVE-2021-25337, CVE-2021-25369 and CVE-2021-25370, that have been exploited by a surveillance company. Pierluigi Paganini.

Surveillance 127

Surveillance Spyware Hacking Mobile 127

Security Affairs

JUNE 23, 2022

The Israeli surveillance firm NSO Group revealed that its Pegasus spyware was used by at least five European countries. The controversial Israeli surveillance vendor NSO Group told the European Union lawmakers that its Pegasus spyware was used by at least five countries in the region.

Spyware 102

Spyware Surveillance Malware Hacking 102

Security Affairs

FEBRUARY 6, 2022

One of the Apple iOS zero-day flaws exploited by the NSO group was also used by another surveillance firm named QuaDream. One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream.

Surveillance 96

Surveillance Spyware Hacking Malware 96

Security Affairs

NOVEMBER 10, 2021

South Korean users have been targeted with a new sophisticated Android spyware, tracked as PhoneSpy, as part of an ongoing campaign. Researchers from Zimperium zLabs uncovered an ongoing campaign aimed at infecting the mobile phones of South Korean users with new sophisticated android spyware dubbed PhoneSpy. Zimperium concludes.

Spyware 141

Spyware Malware Phishing Surveillance 141

Dark Reading

SEPTEMBER 22, 2022

At the SecTor 2022 conference in Toronto next month, researchers from Lookout will take a deep dive into Hermit and the shadowy world of mobile surveillance tools used by repressive regimes.

Surveillance 105

Surveillance Spyware Mobile Government 105