Join our subscribers
Data Leak Reveals Pegasus Spyware Found In Use Unlawfully in 20 Countries, With Capability to Break Current iPhone Security
Thursday, July 22, 2021
It is unclear what, if any, legal backlash NSO might face as a result of what has been learned from the data leak. But Ilia Kolochenko, Founder/CEO and Chief Architect of ImmuniWeb, believes that legal action may ultimately not do anything to change the state of affairs: “Attack attribution in the reported cases is highly complex and unreliable. First, some legitimate end-customers could have shared the cyber warfare with their foreign partners in exchange for valuable data, 0day exploits or sophisticated spyware – this is a widespread practice. Security teams in charge of such data and intelligence sharing are not necessarily experts in human rights protection and may negligently or unknowingly share the software with some grey or even black-listed jurisdictions. Moreover, individual security analysts, employed by the trusted countries, may occasionally break internal rules and unlawfully share the cyber-warfare with unauthorized third parties, as anti-insider security controls have low technical efficiency in such environments. Finally, the legitimate end-customers could have been hacked and compromised, eventually exposing access to the software to unauthorized threat actors. In any case, legal action against NSO is likely futile, and the media hype around the alleged incident – rather brings publicity to the NSO.” Read Full Article
SC Media: The threat of Pegasus-style spyware could creep toward the business community
teiss: Hacker group threatening to sell 1TB of Saudi Aramco data to the highest bidder
