Citizen Lab (@citizenlab): "🚨🚨WE URGE EVERYONE TO UPDATE THEIR APPLE DEVICES AS SOON AS POSSIBLE. We have found an actively exploited #zero #click vulnerability that was used to deliver #NSO group’s #Pegasus #spyware. https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/" | nitter – https://nitter.net/citizenlab/status/1699873620070191520#m

"The Polish Senate Committee has published its report into the use of #Pegasus spyware in Poland. @amnestytech and @amnestypl provided expert testimony to the investigation, which concludes that the purchase and use of Pegasus was unlawful"

Prace / Druki / Senat Rzeczypospolitej Polskiej – https://www.senat.gov.pl/prace/druki/

#NSO #Pegasus #Poland #EU

India: Damning new forensic investigation reveals repeated use of Pegasus spyware to target high-profile journalists - Amnesty International –

Forensic investigations by Amnesty International’s Security Lab confirmed that Siddharth Varadarajan, Founding Editor of The Wire, and Anand Mangnale, the South Asia Editor at The Organised Crime and Corruption Report Project (OCCRP), were among the journalists recently targeted with Pegasus spyware on their iPhones, with the latest identified case occurring in October 2023.

#India #Pegasus #NSO #Spyware #Iphones

Kaspersky reveals new method to detect Pegasus spyware | Kaspersky –

Kaspersky's Global Research and Analysis Team (GReAT) has developed a lightweight method to detect indicators of infection from sophisticated iOS spyware such as #Pegasus, #Reign, and #Predator through analyzing Shutdown.log, a previously unexplored #forensic artifact.

The company’s experts discovered Pegasus infections leave traces in the unexpected system log, Shutdown.log, stored within any mobile #iOS device’s sysdiagnose archive. This archive retains information from each reboot session, meaning anomalies associated with the Pegasus malware become apparent in the log if an infected user reboots their device.

Among those identified were instances of ”sticky“ processes impeding reboots, particularly those linked to Pegasus, along with infection traces discovered through cybersecurity community observations.

#Pegasus #NSO #Reign #Predador #iOS #Spyware #Malware #Kapersky #MobileForensics #CyberSec

NSO Group Is Quietly Plotting a Comeback

NSO Group’s new transparency report arrives amid an apparent push by the spyware vendor to revamp its tarnished image and reverse US regulations that have damaged its business. To achieve its goal, the cyber-intelligence firm is conducting a multimillion-dollar lobbying campaign that attempts to position the company’s spyware as essential for global security

NSO appears to be trying to rebrand itself as being on the side of the “good guys,” make inroads with the Biden administration, and ultimately reverse the ban on its products To succeed in its image-rehabilitation efforts, the spyware vendor has enlisted multiple public affairs consultancies and law firms, including government relations firm Chartwell Strategy Group and law firms Paul Hastings LLP, Steptoe, and Pillsbury Winthrop Shaw Pittman, according to lobbying disclosure documents. In the past three years #NSO had also enlisted the services of Bluelight Strategies and Cherie Blair’s Omnia Strategy in the UK

Confirming Large-Scale Pegasus Surveillance of Jordan-based Civil Society | The Citizen Lab

As part of a collaborative investigation led by Access Now, Citizen Lab researchers conducted forensic analysis of iPhones belonging to members of Jordan-based civil society

The investigation into the targeting of Jordanian civil society with Pegasus was led by Access Now, with the collaboration of Access Now’s local partners, alongside Amnesty Tech, the Citizen Lab, Human Rights Watch, and the Organized Crime and the Corruption Reporting Project.

The investigation found that at least 35 individuals were infected or targeted with Pegasus spyware, from at least 2019 until September 2023, but does not preclude the possibility of infections occurring before or after this timeframe.

#Pegasus #NSO #Spyware #Jordan

High Court grants permission for journalist's legal case against UAE's alleged spyware use - Solicitors Journal

Rania Dridi, a journalist and former activist known for her involvement in the Tunisian revolution of 2011, has been granted permission by the High Court in London to initiate legal proceedings against the United Arab Emirates (UAE). The case revolves around the alleged use of Pegasus spyware to infiltrate her mobile phone, marking a significant development in the realm of digital surveillance and transnational repression.

#Pegasus #NSO #Tunisia #UAE
#RaniaDridi #Journalist

Judge Orders NSO Group to Surrender Pegasus Source Code to Meta | BitDefender - March 2024

A US Judge ordered the infamous spyware developer and vendor NSO Group to turn over its source code to Meta as part of an almost four-year lawsuit.

Meta sued NSO in 2019 after the American company discovered that a zero-day WhatsApp vulnerability was used to deploy the spyware. According to a Guardian report, the NSO's spyware was allegedly used against 1,400 people in the course of just two weeks.

#Pegasus #NSO vs #Meta #WhatsApp #SourceCode

"Is Pegasus 2.0 coming?

Apple warns iPhone users in India and 91 other countries about potential spyware attacks. The company previously sent similar warnings to Indian politicians, suggesting possible state-sponsored spyware attacks."

Apple warns some Indian users their iPhone may be bugged by Pegasus-type spyware | Technology News - The Indian Express -

#Pegasus #NSO #Apple #iPhone #India #Spyware

Erik Prince, founder of Blackwater and the Off Leash group chat links with NSO

Lishem is also a co-founder of a company called Carbyne, which “brought together a who’s who of power brokers and intelligence figures from multiple regions including Russia, China and the Trump administration itself.

#Carbyne’s board members, executives and shareholders have reportedly included Michael Chertoff, former Secretary of Homeland Security under President George W. #Bush; Peter #Thiel, the billionaire GOP megadonor and founder of intelligence contractor #Palantir Technologies; and -- who else -- Jeffrey #Epstein, the long-rumored #Mossad asset and convicted pedophile who committed suicide at New York's Metropolitan Correctional Center in 2019.

Eran Karpen, a co-founder of Unplugged, is a veteran of #Unit8200 which “specializes in eavesdropping, codebreaking, and cyber warfare [and is] ,”. Karpen was previously a senior executive with #CommuniTake, a startup that the #NSO Group emerged from.

#Blackwater

Spyware maker NSO Group claims politicians are ‘legitimate’ spying targets | Cyber Daily

The Israeli cyber intelligence firm known for its “zero-click” spyware has said that it considers officials in all military and government officials legitimate surveillance targets for its software.
 
The NSO Group made the claim in a court filing regarding an ongoing case between the messaging service WhatsApp and the group regarding 2019 allegations of infecting 1,400 WhatsApp users with the company’s Pegasus spyware.
 
The NSO Group is demanding full access to a list of “VIPs” and “civil society leaders” compiled by the Citizen Lab during investigations into the use of Pegasus spyware on non-criminal or terrorist targets. Only a limited list has been shared with the NSO Group, which contends that it needs access to the entire list to better make its case.

#NSO #Pegasus

Dusting off Old Fingerprints: NSO Group's Unknown MMS Hack | Enea –

Unknown MMS Hack

In the ever-evolving landscape of mobile network security, it’s essential to stay vigilant and informed about the latest threats. However to do so, sometimes we end up looking in places we would not normally look. Today, we delve into a previously unknown mobile network attack known as the “MMS Fingerprint” attack, reportedly used by NSO Group, a well-known actor in the realm of surveillance technologies. How we found this attack – which had essentially been hiding in plain sight – and how this attack might work, takes a bit of explaining.

#MMSFingerprint #NSO #MMS

#NSO – not government clients – operates its #spyware, legal documents reveal.

Legal documents released in ongoing US litigation between NSO Group and WhatsApp have revealed for the first time that the Israeli cyberweapons maker – and not its government customers – is the party that “installs and extracts” information from mobile phones targeted by the company’s hacking software.

https://www.theguardian.com/technology/2024/nov/14/nso-pegasus-spyware-whatsapp

#pegasus

Meet the Spyware Companies Preparing to Unleash Their Tech During #Trump's 2nd Term
https://www.thelastamericanvagabond.com/spyware-unleash-trump-2nd-term/

#israel #Spyware #NSO #ParagonSolutions #fdt

#Pegasus spyware maker #NSO Group is liable for attacks on 1,400 #WhatsApp users.

https://www.theverge.com/2024/12/20/24326342/meta-whatsapp-nso-group-pegasus-spyware-hack-liable

Catching Pegasus: Mercenary Spyware and the Liability of the NSO Group - CounterPunch


"On December 20, the most significant legal decision to date regarding NSO’s conduct was handed down by Senior District Judge Phyllis J. Hamilton of the US District Court for the Northern District of California.  Her judgment concerned WhatsApp’s legal suit filed in 2019 against the NSO Group, alleging that Pegasus had been installed on approximately 1,400 mobile phones and devices owned by journalists, activists and diplomats to conduct surveillance upon them.  In so doing, WhatsApp alleged that NSO had breached both the federal Computer Fraud and Abuse Act and California’s Comprehensive Computer Data Access and Fraud Act.  After five years, the case took an interesting turn with a move by WhatsApp to seek partial summary judgment."


#Pegasus #NSO #Spyware #WhatsApp #US

■■■■□ Seven things we learned from #WhatsApp vs. #NSO Group #pegasus spyware lawsuit.

https://techcrunch.com/2025/05/13/seven-things-we-learned-from-whatsapp-vs-nso-group-spyware-lawsuit/

Widow of slain Saudi journalist can’t pursue surveillance claims against Israeli spyware firm  | Courthouse News Service

A Fourth Circuit appeal panel dismissed on Wednesday claims by the widow of journalist Jamal Khashoggi that an Israeli spy firm's technology allowed Saudi Arabia and the United Arab Emirates to illegally track her communications in the lead-up to her husband's political assassination.

Though Hanan Elatr Khashoogi, an Egyptian citizen in Virginia, claimed Israel-based NSO Group Technologies used its Pegasus software to illegally track her phone on Saudi Arabia's behalf, the three-judge panel ruled that Hanan had not adequately shown that NSO Group, as opposed to the Saudi or Emirati governments, conducted surveillance of her devices

#Pegasus #NSO #KSA vs #Kashoogi