3 ms·
It makes perfect sense to me that there would exists a centralized list inside the company of the people being targeted. There would need to a server serving t
by throwaway4good 5y ago
It makes perfect sense to me that there would exists a centralized list inside the company of the people being targeted.
There would need to a server serving the exploit and also collecting the data from the comprised phones. Naturally that server would have a list of the phones it collected from, probably keyed by phone number as that would be the most straightforward identifier.
Also I assume nso bills their clients pr. target.
- throwaway4good 5y agoImplicit assumption here is that these super hackers would also have super security. I am not sure I buy that. My guess is that NSO operational corpse is made up of young young Israelis straight out of the military plus maybe an engineering school. They are trained in systematic hacking and probably have access to a privileged set of exploits provided by the Israeli military and maybe the US. But not much beyond that in terms of engineering skills. In short I wouldn’t be surprised if their exploit server and data collection server is maybe with php and mysql. Also. How do you sell a service like this? Getting Orban and similar as customers. Requires quite a bit of a network.
- belter 5y ago"Everything We Know About NSO Group" https://www.forbes.com/sites/thomasbrewster/2016/08/25/everything-we-know-about-nso-group-the-professional-spies-who-hacked-iphones-with-a-single-text/?sh=4a049ded3997 https://www.forbes.com/sites/thomasbrewster/2016/08/25/every... From 2016 but has the core personalities and the partners owning the company. San Francisco and London based... Some additional context: https://www.bloomberg.com/news/features/2021-01-26/private-equity-firm-francisco-partners-profits-from-surveillance-censorship https://www.bloomberg.com/news/features/2021-01-26/private-e...