Again and again, NSO Group’s customers keep getting their spyware operations caught


On Thursday, Amnesty International published a new report detailing attempted hacks against two Serbian journalists, allegedly carried out with NSO Group’s spyware Pegasus.

The two journalists, who work for the Serbia-based Balkan Investigative Reporting Network (BIRN), received suspicious text messages including a link — basically a phishing attack, according to the nonprofit. In one case, Amnesty said its researchers were able to click on the link in a safe environment and see that it led to a domain that they had previously identified as belonging to NSO Group’s infrastructure.

Read more…
Source: TechCrunch News


Sign up for our Newsletter
The latest news and insights delivered right to your inbox.


Related:

  • Takedown of SMS-based FluBot spyware infecting Android phones

    June 1, 2022

    An international law enforcement operation involving 11 countries has resulted in the takedown of one of the fastest-spreading mobile malware to date. Known as FluBot, this Android malware has been spreading aggressively through SMS, stealing passwords, online banking details and other sensitive information from infected smartphones across the world. Its infrastructure was successfully disrupted earlier ...

  • Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys

    May 16, 2022

    Trend Micro researchers recently observed a number of apps on Google Play designed to perform malicious activities such as stealing user credentials and other sensitive user information, including private keys. Because of the number and popularity of these apps — some of them have been installed over a hundred thousand times — we decided to ...

  • Spain fires intelligence chief amid phone hacking scandals

    May 10, 2022

    Spain’s government fired the director of the country’s top intelligence agency Tuesday following the hacking of politicians’ cellphones, including the devices of the prime minister and several supporters of the Catalonia region’s secession. The National Intelligence Center, or CNI, has been under fire for its role in spying on Catalan separatists and for taking a full ...

  • Spanish PM, defense minister latest Pegasus spyware victims

    May 2, 2022

    Spain’s prime minister and defense minister are the latest elected officials to detect Pegasus spyware on their mobile phones, according to multiple media reports quoting Spanish authorities. During a press conference on Monday, Félix Bolaños, the minister for the presidency, told reporters that cellphones of Spanish prime minister Pedro Sánchez and defense minister Margarita Robles were ...

  • UK Prime Minister, Catalan groups ‘targeted by NSO Pegasus spyware’

    April 18, 2022

    Citizen Lab has reported finding suspected surveillance software on devices associated with both the UK Prime Minister’s Office and what was formerly called the British Foreign and Commonwealth Office. The Canadian research outfit also said it had identified at least 65 individuals linked with Catalan civil society groups in Spain who were targeted by, or infected ...

  • Borat RAT: Multiple threat of ransomware, DDoS and spyware

    April 4, 2022

    A new remote access trojan (RAT) dubbed “Borat” doesn’t come with many laughs but offers bad actors a menu of cyberthreats to choose from. RATs are typically used by cybercriminals to get full control of a victim’s system, enabling them to access files and network resources and manipulate the mouse and keyboard. Borat does all this ...