Attackers have long used commercial products developed by legitimate companies to compromise targeted devices. These products are known as commercial spyware.
Commercial spyware operations mainly target mobile platforms with zero- or one-click zero-day exploits to deliver spyware. This threat initially came to light with the leaks of HackingTeam back in 2015, but gained new notoriety with public reporting on the NSO Group, and, in the years that have followed, the landscape has exploded.
Read more…
Source: Talos