3 ms·
Does anyone have any idea how Pegasus actually works? I haven't found any teardowns or even a clear description of what the iMessage says. This is some kind of
by iamnotwhoiam 5y ago
Does anyone have any idea how Pegasus actually works? I haven't found any teardowns or even a clear description of what the iMessage says.
This is some kind of code injection attack that can go through a text message?
- est31 5y agoFrom my understanding, the attack can happen through multiple ways. Companies like NSO purchase vulnerabilities for this step and probably have a set of them on their disposal, ready to deploy ones as they get discovered. Pegasus is the rootkit which is installed once the attack is successful, and allows spying on the user. https://en.wikipedia.org/wiki/Pegasus_(spyware) https://en.wikipedia.org/wiki/Pegasus_(spyware)
- nuker 5y agoiOS iMessage bugs parsing images, I recall
- deregulateMed 5y agoFrom the Amnesty report shown by another commentator, there were a bunch of compromised Apple services.
- abhiminator 5y agoThis article from Amnesty International's Security Lab is a good primer on the attack vector used by the Pegasus exploit https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/ https://www.amnesty.org/en/latest/research/2021/07/forensic-...
- swiley 5y agoThe iMessage exploit sounds like a Null terminated string issue. The rest of it sounds like a Metasploit-esque framework along with some telemetry tools.
- fulafel 5y agoPegasus is a name for their attack repertoire of the day plus whatever next stage payloads are run upon a successful compromise.