Beyond the Veil of Surveillance: Private Sector Offensive Actors (PSOAs) – SOCradar - June 2023

The global cyber-surveillance industry has made “surveillance as a service” that includes various tools and advanced malware such as ‘Pegasus,’ ‘DevilsTongue,’ and ‘Predator‘ widely accessible, empowering both government and non-government entities with capabilities exclusive to highly sophisticated actors.

Individuals can protect themselves against attacks that exploit simple mistakes victims make, such as clicking on a link, opening untrusted documents, or neglecting device updates, by adopting basic security measures like maintaining awareness, enabling multi-factor authentication, and keeping devices and applications up-to-date. However, PSOAs also employ advanced techniques like zero-day and zero-click exploits that require no victim interaction, enabling surveillance

#PSOAs #CommercialSpyware
#spyware #Pegasus #Predator #DevilsTongue

Sweet QuaDreams or Nightmare Before Christmas? Dissecting an iOS 0-Day

Not quite nation states but not quite independent corporations, "private sector offensive actors" (#PSOAs) have become one of the latest sophisticated threats. These companies develop and sell surveillance and intrusion capabilities to governments around the world. While some governments responsibly use the tools to track criminals and terrorists, others instead opt to abuse the tools by spying on journalists, dissidents, or members of their political opposition....

By: Christine Fossaceca , Bill Marczak

Full Abstract and Presentation Materials

Initial post on Quadreams
Total post (5)

#QuaDreams #Ios #ZeroDay #PSAO