4 ms·
The article mentions NSO's Pegasus that the journalist victim downloaded, and presumably installed surveillance tools on his iPhone. What is Pegasus? Is it pl
by rediguanayum 6y ago
The article mentions NSO's Pegasus that the journalist victim downloaded, and presumably installed surveillance tools on his iPhone. What is Pegasus? Is it platform of browser zero days that then installs surveillance tools? Does it root kit the phone?
- mywittyname 6y agohttps://en.wikipedia.org/wiki/Pegasus_(spyware) https://en.wikipedia.org/wiki/Pegasus_(spyware) From the looks of the associated CVEs, it is buffer overflow attack against Safari. The exploit is probably to use a MitM attack to inject the payload into an arbitrary website.
- olliej 6y agoIt’s easy to look up, it has historically been used to spy on human rights activists and reporters. It’s sold by the NSO group, that has repeatedly tried to smear and spy on organisations that report on them knowingly selling to and supporting governments that are using these tools to attack HRAs, etc. I assume that they have updated it since it first came to light, as the vulnerabilities at the time were all fixed. Note that the vulnerabilities that they use are all the same ones used by jailbreaks, so fixing them necessarily means preventing jailbreaks.
- saagarjha 6y ago> Note that the vulnerabilities that they use are all the same ones used by jailbreaks, so fixing them necessarily means preventing jailbreaks. Well, unless there was a method to jailbreak your device that did not require a chain of software vulnerabilities.
- nsajko 6y agoAFAIK, Pegasus seems to be the name for the spyware (surveillance tools). See https://en.wikipedia.org/wiki/NSO_Group https://en.wikipedia.org/wiki/NSO_Group https://en.wikipedia.org/wiki/Pegasus_(spyware) https://en.wikipedia.org/wiki/Pegasus_(spyware)