时间:2025-04-26 17:33:40 来源:网络整理编辑:時尚
As part of Google's efforts to track the activities of commercial spyware vendors, the company's Thr
As part of Google's efforts to track the activities of commercial spyware vendors, the company's Threat Analysis Group (TAG) released a report Thursday on spyware campaigns targeting Android and iOS users.
Google TAG researchers Benoit Sevens and Clement Lecigne go into detail about the use of entrepreneurial grade spyware dubbed "Hermit." This sophisticated spyware tool allows attackers to steal data, private messages and make phone calls. In their report, TAG researchers attributed Hermit to RCS Labs, a commercial spyware vendor based in Italy.
Hermit poses many significant dangers. Due to its modularity, Hermit is quite customizable, allowing the functions of the spyware to be altered to the will of its user. Once fully situated on a target's phone, attackers can harvest sensitive information such as call logs, contacts, photos, precise location, and SMS messages.
An explainer:What is 'hermit spyware' and how can you protect yourself from it?
Sevens and Lecigne's full report details the ways in which attackers can access both Android and iOS devices through the use of clever tricks and drive-by attacks. Potential targets of this scam will have their data disabled through their ISP carrier before sending a malicious link via text to get them to ‘fix’ the issue. If that doesn't work, targets will be tricked into downloading malicious apps masqueraded as messaging applications.
Just last week, cybersecurity firm Lookout reported the use of Hermit by agents working in the governments of Kazakhstan, Syria, and Italy. Google has already identified victims in these countries, stating that "TAG is actively tracking more than 30 vendors with varying levels of sophistication and public exposure selling exploits or surveillance capabilities to government-backed actors."
The Milan-based company claims to provide "law enforcement agencies worldwide with cutting-edge technological solutions and technical support in the field of lawful interception for more than twenty years." More than 10,000 intercepted targets are purported to be handled daily in Europe alone.
When reached out for comment by The Hacker News, RCS Labs said its "core business is the design, production, and implementation of software platforms dedicated to lawful interception, forensic intelligence, and data analysis" and that it "helps law enforcement prevent and investigate serious crimes such as acts of terrorism, drug trafficking, organized crime, child abuse, and corruption."
Still, the news of the spyware being used by state government agents is concerning. Not only does it erode trust in the safety of the internet but it also puts at risk the lives of anyone a government considers an enemy of the state such as dissidents, journalists, human rights workers, and opposition party politicians.
"Tackling the harmful practices of the commercial surveillance industry will require a robust, comprehensive approach that includes cooperation among threat intelligence teams, network defenders, academic researchers, governments, and technology platforms," Google TAG researchers wrote. "We look forward to continuing our work in this space and advancing the safety and security of our users around the world."
TopicsCybersecurity
Michael Phelps says goodbye to the pool with Olympic gold2025-04-26 17:22
杜江霍思燕攜手出席時尚活動 杜江談 :“愛國是一種時尚”2025-04-26 17:05
春蜂桃裏華語民謠原創大賽大眾票選結果揭曉,南北半決賽即將開啟2025-04-26 16:57
萬人聖誕之旅 ,本味寒造帶你造起來2025-04-26 16:52
Researchers create temporary tattoos you can use to control your devices2025-04-26 16:49
華為音樂“肆FUN新聲”+原創新星引爆西安濟南校園2025-04-26 16:40
故宮 、三元攜手上新,三元故宮牛奶全新包裝正式發布2025-04-26 16:29
賽製新升級!《主持人大賽》經典節目實戰碰撞出思維火花2025-04-26 16:22
You can now play 'Solitaire' and 'Tic2025-04-26 15:08
片仔癀聯合加多寶,跨界潮玩,為你的冬天預防火氣!2025-04-26 14:47
You can now play 'Solitaire' and 'Tic2025-04-26 17:31
頻登各大綜藝舞台 演員精靈用心把歡樂帶給觀眾2025-04-26 17:31
《惹不起的殿下大人》片尾曲《背後》上線 程嘉欣Mika新聲力量飽受好評2025-04-26 17:29
“奪命姐”曹優美受邀出席“紫竹鹽”年會2025-04-26 17:16
'The Flying Bum' aircraft crashes during second test flight2025-04-26 17:14
重磅!台鈴與東方衛視達成戰略合作 獨家冠名王牌綜藝《親愛的,來吃飯》!2025-04-26 16:18
景甜亮相上海品牌活動 夢幻銀熠氣場全開2025-04-26 15:56
綻放歌者魅力 華為音樂“肆FUN新聲”創作沙龍以歌會友2025-04-26 15:30
What brands need to know about virtual reality2025-04-26 15:12
賽製新升級 !《主持人大賽》經典節目實戰碰撞出思維火花2025-04-26 15:10