7 ms·

Does NSO make software other than Pegasus? That software exploited a bug in ios prior to 9.3.5, which was patched in August 2016. I’m wondering if there are ne

by graeme 8y ago

Does NSO make software other than Pegasus? That software exploited a bug in ios prior to 9.3.5, which was patched in August 2016. I’m wondering if there are new exploits, or if Bezos or his girlfriend ran really old ios versions. The latter seems unlikely. https://en.m.wikipedia.org/wiki/Pegasus_(spyware) https://en.m.wikipedia.org/wiki/Pegasus_(spyware)

leroy_masochist 8y ago
Purely speculation, but from a commercial perspective it would certainly make sense to have the highest-tier version of your product available only to select, high-paying customers; hypothetically this might include zero day exploits of up-to-date software. Pure speculation.
- c0nducktr 8y ago
  Would payments for this be higher than the potential costs of leaving known exploits active on their devices?
  - heavenlyblue 8y ago
    Exploits are only used to access the system. You can delete them from memory afterwards.
goatsi 8y ago
They would only need to find a new exploit to install the malware, not rewrite the malware entirely. They have given demos as recently as 2018 where they have demonstrated a 0 interaction remote iphone 0day. https://motherboard.vice.com/en_us/article/qvakb3/inside-nso-group-spyware-demo https://motherboard.vice.com/en_us/article/qvakb3/inside-nso... >The entrepreneur, who spoke to Motherboard on condition of anonymity because he was not authorized to talk about the meeting, agreed, but said that NSO would have to target his other iPhone, which he brought with him and had a foreign phone number. He gave NSO that phone number and put the phone on the desk. >After “five or seven minutes,” the contents of his phone’s screen appeared on a large display that was set up in the meeting room, all without him even clicking on a malicious link, he said. >“I see clicking on all kinds of icons: email icon, SMS icon, and other icons,” he told Motherboard. “And suddenly I saw all my messages in there and I saw all the email in there and they were capable to open any information that was on my [iPhone].”
srcmap 8y ago
A semi good news from this is for the politicians to know that: "If Bezos' phone can be hacked by Saudis, so can all the politicians' phones and their office workers' phones." A good story to tell next time when politician want to enact some new law to weaken the security of phone, for Apple/Android to build security holes for the "law enforcement / governments".
- amsau 8y ago
  Why would anyone assume that politicians phones weren’t hacked? If anything this behavior, of invading privacy and trying to control people by blackmailing them, happened to the richest man in the world. A lot of things mentioned in this article is similar to what happened with Alabama governer Robert Bentley. Early 2016, a leaked recordering of his conversation with his mistress was leaked to media (unknown source) Then a year later his wife screenshot his iMessage conversations with his mistress Rebekah! And everyone thinks it’s the wife. Between 2016-2017 and before the wife screenshot these photos there was an organized campaign against Alabama governer. Who by the way: - Supoorted Kasich to run for president - took down a confederate flag - was planning a settlement for Syrian refugee.. Just think of this, what if Trump was able to hack every congressman phone? What gave national acquirer the confidence to black Bezos? Unless of course they’ve done it too many times to too many people. The question who are these victims? We need to know who is/was used as a tool to implement Trump and kushner agenda.
  - gurumeditations 8y ago
    If they tried to blackmail Bezos, then imagine how many senators and representatives they may have blackmail on. This is a true crisis.
    - amsau 8y ago
      I can only look at the result of how many republicans turned into a submissive tool used by trump...
    - geezerjay 8y ago
JohnStrangeII 8y ago
Generally these companies use whatever method or exploit is available. Depending on how good their employees and other sources are (incl. the blackmarket, intelligence agency contacts, etc.), it might occasionally take some time after a patch until they get a new 0-day exploit. FinFisher makes or made the same promises, according to their own advertisements. Most of the time you don't even need a 0-day exploit, simple trojan horses/targeted phishing attacks work fine. Fake celltowers can also be used. The possibilities are nearly endless. Endpoint security is virtually nonexistent.

by graeme 8y ago

leroy_masochist 8y ago

Purely speculation, but from a commercial perspective it would certainly make sense to have the highest-tier version of your product available only to select, high-paying customers; hypothetically this might include zero day exploits of up-to-date software. Pure speculation.

c0nducktr 8y ago
Would payments for this be higher than the potential costs of leaving known exploits active on their devices?
- heavenlyblue 8y ago
  Exploits are only used to access the system. You can delete them from memory afterwards.

goatsi 8y ago

They would only need to find a new exploit to install the malware, not rewrite the malware entirely. They have given demos as recently as 2018 where they have demonstrated a 0 interaction remote iphone 0day. https://motherboard.vice.com/en_us/article/qvakb3/inside-nso-group-spyware-demo https://motherboard.vice.com/en_us/article/qvakb3/inside-nso... >The entrepreneur, who spoke to Motherboard on condition of anonymity because he was not authorized to talk about the meeting, agreed, but said that NSO would have to target his other iPhone, which he brought with him and had a foreign phone number. He gave NSO that phone number and put the phone on the desk. >After “five or seven minutes,” the contents of his phone’s screen appeared on a large display that was set up in the meeting room, all without him even clicking on a malicious link, he said. >“I see clicking on all kinds of icons: email icon, SMS icon, and other icons,” he told Motherboard. “And suddenly I saw all my messages in there and I saw all the email in there and they were capable to open any information that was on my [iPhone].”

srcmap 8y ago

A semi good news from this is for the politicians to know that: "If Bezos' phone can be hacked by Saudis, so can all the politicians' phones and their office workers' phones." A good story to tell next time when politician want to enact some new law to weaken the security of phone, for Apple/Android to build security holes for the "law enforcement / governments".

amsau 8y ago
Why would anyone assume that politicians phones weren’t hacked? If anything this behavior, of invading privacy and trying to control people by blackmailing them, happened to the richest man in the world. A lot of things mentioned in this article is similar to what happened with Alabama governer Robert Bentley. Early 2016, a leaked recordering of his conversation with his mistress was leaked to media (unknown source) Then a year later his wife screenshot his iMessage conversations with his mistress Rebekah! And everyone thinks it’s the wife. Between 2016-2017 and before the wife screenshot these photos there was an organized campaign against Alabama governer. Who by the way: - Supoorted Kasich to run for president - took down a confederate flag - was planning a settlement for Syrian refugee.. Just think of this, what if Trump was able to hack every congressman phone? What gave national acquirer the confidence to black Bezos? Unless of course they’ve done it too many times to too many people. The question who are these victims? We need to know who is/was used as a tool to implement Trump and kushner agenda.
- gurumeditations 8y ago
  If they tried to blackmail Bezos, then imagine how many senators and representatives they may have blackmail on. This is a true crisis.
  - amsau 8y ago
    I can only look at the result of how many republicans turned into a submissive tool used by trump...
  - geezerjay 8y ago

JohnStrangeII 8y ago

Generally these companies use whatever method or exploit is available. Depending on how good their employees and other sources are (incl. the blackmarket, intelligence agency contacts, etc.), it might occasionally take some time after a patch until they get a new 0-day exploit. FinFisher makes or made the same promises, according to their own advertisements. Most of the time you don't even need a 0-day exploit, simple trojan horses/targeted phishing attacks work fine. Fake celltowers can also be used. The possibilities are nearly endless. Endpoint security is virtually nonexistent.