What is Pegasus, how spyware works: what we know

What is Pegasus? How does spyware work? How does he spy on a smartphone? The issues are back on top with the Washington Post investigation into the spying activity conducted by dozens of countries on thousands of cell phones, including those of many politicians, journalists, human rights activists, managers. a software designed to bypass the defenses of iPhones and Android smartphones. The attacks leave very few traces. Traditional measures – ordinary and complex passwords – are of little use. Pegasus can sneak in by stealing photos, recordings, location data, phone calls, passwords, call logs, posts published on social media. The program can also activate the smartphone’s camera and microphone. WHAT IS A SPYWARE The term spyiware indicates a category of software defined as ‘malicious’, also known as malware, which aim to collect information contained in another user’s device: PC or mobile phone end up in the viewfinder. A spyware, processed with relative simplicity, exploits the security gaps of the target device. The most complex spyware is able to bypass even the most attentive and modern defenses. These tools are also used by intelligence agencies: these are products at the center of a private market, which countries access as buyers. who could click on a link received via email, WhatsApp, social network or text message. Often these are messages that appear suspicious and are thrown away. In the case of Pegasus, it is reasonable to assume that the ‘baits’ have been packaged in an extremely convincing manner, also taking into account the characteristics and interests of the targeted users. a device. They range from the ‘traditional’ recording of phone calls that are intercepted to the acquisition of emails, posts on social media, call logs, messages sent with encrypted apps such as WhatsApp and Signal. Spyware is able to locate the device and therefore the user, also determining whether the person being monitored is stationary or moving. Contacts, user names, passwords, notes, documents, including photos and videos, are stolen from the attacked cell phone. The most modern programs are able to activate microphones and cameras, without activating the sensors and without showing signals relating to the recording in progress. The most modern spyware takes control of devices without apparently modifying their functioning: a hacked phone is revealed as such only after a thorough examination conducted by a specialist. WHAT IS IT NSONSO Group is a leading Israeli company in the production of spyware. Pegasus is its flagship product, designed to infiltrate iPhones and Android devices. Founded in 2010, the company – according to the Washington Post – has customers in 40 countries. The company has offices in Bulgaria and Cyprus, has 750 employees overall and recorded a record turnover of $ 240 million last year according to Moody’s. The majority of the shares belong to Novalpina Capital, a financial company based in London. Pegasus, writes the Washington Post, was conceived as a tool for monitoring the activity of major terrorists and criminals. The company NSO has judged the results of the investigation to be groundless, pointing out – according to law – that it does not manage the software sold to its customers and does not “have elements” relating to specific intelligence activities. “Clearly said – the company states – MSO Group is engaged in a rescue mission and will continue to carry it out despite all continuous attempts to discredit its work on false grounds”. The company denied any involvement in activities against journalist Jamal Khashoggi – who was killed in 2018 – and added that it “will continue to investigate” on the basis of all “credible reports of abuse” by Pegasus and “will take appropriate action based on the results. of such investigations “. Such actions also include “shutting down the system of customers” who have acted incorrectly: “NSO has shown that it has the ability and willingness to do so, has done so several times in the past and will not hesitate to do so again if a situation does so. requires “, the company’s position reported by the WP.