WhatsApp flaw used to install spyware by simply calling the target

A security vulnerability in the popular Facebook-owned end-to-end encrypted messaging app WhatsApp allowed attackers to install spyware on smartphones without any user interaction, Financial Times has reported. Exploitation of the flaw could be trigger… Continue reading WhatsApp flaw used to install spyware by simply calling the target

WhatsApp flaw lets spies install surveillance software with a simple call, even unanswered

A serious flaw in instant messaging service WhatsApp lets attackers remotely install surveillance software and spy on selected, high-profile targets, the company’s security team confirmed today. The attack was discovered earlier this month, the B… Continue reading WhatsApp flaw lets spies install surveillance software with a simple call, even unanswered

Human rights groups to ask Israeli court to revoke NSO Group’s export license

Human rights advocates, including Amnesty International, plan to file a petition Tuesday in Israeli court to revoke mobile spyware vendor NSO Group’s export license, citing alleged abuses stemming from the vendor’s technology. The legal action is an escalation in the confrontation between civil society groups and NSO Group, and comes after the company’s Pegasus surveillance software was reportedly used to track an Amnesty International researcher. Pegasus is so potent in its ability to compromise a mobile phone that it requires a license from the Israeli defense ministry to export. Where NSO Group’s spyware has been reportedly been misused, “we’re going to keep looking for accountability on a case-by-case basis,” said Amnesty’s Danna Ingleton, who will submit an affidavit as part of the court filing. “In the meantime, there has to be enough evidence to revoke the export license.” The legal motion, to be submitted in the District Court of Tel […]

The post Human rights groups to ask Israeli court to revoke NSO Group’s export license appeared first on CyberScoop.

Continue reading Human rights groups to ask Israeli court to revoke NSO Group’s export license

Israeli Hacking Company NSO Group Is Trying to Clean Up Its Image

The notorious and controversial Israeli hacking and surveillance tools vendor NSO Group has launched a big marketing campaign with a new website and Google ads. Continue reading Israeli Hacking Company NSO Group Is Trying to Clean Up Its Image

NSO Group spyware targeted widow of Mexican journalist, researchers say

A notorious piece of spyware has been used to target the wife of a slain Mexican journalist, security researchers said Wednesday, adding to ongoing public scrutiny of the company that developed the powerful surveillance tool. Days after Javier Valdez Cárdenas, a reporter known for his coverage of international drug trafficking, was murdered in May 2017, multiple attempts were made to hack the phone of his widow, Griselda Triana, with spyware made by NSO Group, according to Citizen Lab, a digital rights and research organization at the University of Toronto. The text messages sent to Triana, who is also a journalist, were laced with software that would have turned her phone into a multifaceted surveillance device, Citizen Lab researchers said. One of the messages tugged at her grief as a widow, asking, “What do you think of this story?” Triana didn’t click on either link and turned the texts over to Mexican advocacy […]

The post NSO Group spyware targeted widow of Mexican journalist, researchers say appeared first on CyberScoop.

Continue reading NSO Group spyware targeted widow of Mexican journalist, researchers say

NSO Group founders buy back their spyware company

The founders of NSO Group, a controversial Israeli spyware vendor, said Thursday that they had re-acquired the company from private equity firm Francisco Partners. NSO Group co-founders Shalev Hulio and Omri Lavie led the acquisition and promised more growth for the company, which reported dozens of customers and $250 million in revenue in 2018. NSO Group did not reveal the terms of the deal, which was supported by Novalpina Capital, a London-based firm. Sources had told CyberScoop in June of 2017 that Francisco Partners was asking for more than $1 billion for NSO Group. Francisco paid $120 million for a majority stake in the company in 2014. NSO Group says it lawfully sells its surveillance technology to governments to combat terrorism and organized crime. However, the company’s signature Pegasus spyware has been used to target journalists, anticorruption watchdogs and political dissidents, according to research from Amnesty International and the University of […]

The post NSO Group founders buy back their spyware company appeared first on CyberScoop.

Continue reading NSO Group founders buy back their spyware company

How sloppy OPSEC gave researchers an inside look at the exploit industry

The companies that make advanced surveillance software are quiet by design. They generate enough press to let the market (i.e., governments) know their products exist, but it’s not as if there’s an app store for mobile spyware. They do make mistakes, though. And thanks to two researchers from Lookout, the public now has more information on how these companies operate. In the course of investigating a new kind of Android-focused mobile malware, Lookout’s Andrew Blaich and Michael Flossman uncovered text conversations among members of a nation-state’s surveillance program. Those files, which were stored on a server that was part of the malware’s command-and-control infrastructure, represented a trove of insight about how much money the particular government budgeted for its program, whether its spies decided to buy exploits or build their own, and why it’s easier than ever for countries to leverage surveillance technology. It started when Blaich and Flossman were analyzing how a single malware sample had manipulated data within the popular […]

The post How sloppy OPSEC gave researchers an inside look at the exploit industry appeared first on CyberScoop.

Continue reading How sloppy OPSEC gave researchers an inside look at the exploit industry