时间:2024-09-20 05:54:00 来源:网络整理编辑:時尚
As part of Google's efforts to track the activities of commercial spyware vendors, the company's Thr
As part of Google's efforts to track the activities of commercial spyware vendors, the company's Threat Analysis Group (TAG) released a report Thursday on spyware campaigns targeting Android and iOS users.
Google TAG researchers Benoit Sevens and Clement Lecigne go into detail about the use of entrepreneurial grade spyware dubbed "Hermit." This sophisticated spyware tool allows attackers to steal data, private messages and make phone calls. In their report, TAG researchers attributed Hermit to RCS Labs, a commercial spyware vendor based in Italy.
Hermit poses many significant dangers. Due to its modularity, Hermit is quite customizable, allowing the functions of the spyware to be altered to the will of its user. Once fully situated on a target's phone, attackers can harvest sensitive information such as call logs, contacts, photos, precise location, and SMS messages.
An explainer:What is 'hermit spyware' and how can you protect yourself from it?
Sevens and Lecigne's full report details the ways in which attackers can access both Android and iOS devices through the use of clever tricks and drive-by attacks. Potential targets of this scam will have their data disabled through their ISP carrier before sending a malicious link via text to get them to ‘fix’ the issue. If that doesn't work, targets will be tricked into downloading malicious apps masqueraded as messaging applications.
Just last week, cybersecurity firm Lookout reported the use of Hermit by agents working in the governments of Kazakhstan, Syria, and Italy. Google has already identified victims in these countries, stating that "TAG is actively tracking more than 30 vendors with varying levels of sophistication and public exposure selling exploits or surveillance capabilities to government-backed actors."
The Milan-based company claims to provide "law enforcement agencies worldwide with cutting-edge technological solutions and technical support in the field of lawful interception for more than twenty years." More than 10,000 intercepted targets are purported to be handled daily in Europe alone.
When reached out for comment by The Hacker News, RCS Labs said its "core business is the design, production, and implementation of software platforms dedicated to lawful interception, forensic intelligence, and data analysis" and that it "helps law enforcement prevent and investigate serious crimes such as acts of terrorism, drug trafficking, organized crime, child abuse, and corruption."
Still, the news of the spyware being used by state government agents is concerning. Not only does it erode trust in the safety of the internet but it also puts at risk the lives of anyone a government considers an enemy of the state such as dissidents, journalists, human rights workers, and opposition party politicians.
"Tackling the harmful practices of the commercial surveillance industry will require a robust, comprehensive approach that includes cooperation among threat intelligence teams, network defenders, academic researchers, governments, and technology platforms," Google TAG researchers wrote. "We look forward to continuing our work in this space and advancing the safety and security of our users around the world."
TopicsCybersecurity
Katy Perry talks 'Rise,' her next batch of songs, and how to survive Twitter2024-09-20 05:36
曝徐新鄭錚或遭足協追加處罰 犯規超出技戰術範疇2024-09-20 05:34
曝巴薩將購萊萬+明夏免簽薩拉赫 欲恢複昔日霸主地位2024-09-20 05:18
中超首輪五佳球 :林良銘蠍子擺尾 阿奇姆彭單騎闖關2024-09-20 05:14
Pokémon Go is so big that it has its own VR porn parody now2024-09-20 04:32
吳金貴:理解海港麵對的困難 談不上什麽德比2024-09-20 04:03
粵媒 :廣州城首輪慘敗 本賽季保級壓力空前巨大2024-09-20 03:31
巴西內訌!兩將訓練場險大打出手 內馬爾奇葩拉架2024-09-20 03:14
How Hyperloop One went off the rails2024-09-20 03:11
拜仁將3500+500萬歐再次報價馬內 各方盼盡快完成2024-09-20 03:10
This 'sh*tpost' bot makes terrible memes so you don't have to2024-09-20 05:11
噩耗!前伊拉克國腳遭5人襲擊身亡 曾隨隊奪亞洲杯冠軍2024-09-20 05:11
萊萬可動用稀有條款強行離隊 隻需賠拜仁2400萬歐2024-09-20 05:10
曝拉波爾塔和高層討論再次降薪 巴薩球員並不知情2024-09-20 05:08
Visualizing July's astounding global temperature records2024-09-20 04:46
曝馬內90%可能加盟拜仁 利物浦拒2100+400萬鎊報價2024-09-20 04:01
俱樂部副總孫祥找徐新談話 希望其情緒不要受影響2024-09-20 03:55
俱樂部副總孫祥找徐新談話 希望其情緒不要受影響2024-09-20 03:35
The U.S. will no longer have the final say on internet domain names2024-09-20 03:27
中超首輪土帥完勝洋帥 23粒進球本土球員貢獻12球2024-09-20 03:17