Josip Zurak

NSO Group admits cutting off 10 customers because they abused its Pegasus spyware, say unsealed court documents. WhatsApp won a significant legal battle when a U.S. federal judge approved the public release of three court documents that unveil the inner workings of Pegasus, the notorious spyware developed by the Israeli surveillance technology firm, NSO Group. The newly unsealed documents include intriguing revelations derived from NSO employee depositions, internal company documents, and even WhatsApp messages exchanged among NSO staff, acquired through subpoenas sent by WhatsApp. These documents provide a rare peek into the methods employed by NSO and their dubious practices. Most notably, the documents disclose that NSO has severed connections with ten government customers in recent years, restricting their access to the Pegasus spyware due to reported abuses of the service. This development sheds light on NSO’s attempts to distance itself from potentially unethical practices, although questions still remain concerning the overall effectiveness of these measures. This latest unveiling marks a significant milestone in the ongoing lawsuit filed by WhatsApp in 2019, alleging that NSO has engaged in illegal activities that violate the Computer Fraud and Abuse Act and have breached WhatsApp’s terms of service. The litigation has been fueled by a series of cyberattacks targeting WhatsApp users, including journalists, dissidents, and human rights. The court documents, reviewed by TechCrunch, reveal that NSO had developed a comprehensive hacking suite dubbed “Hummingbird.” This suite was designed to breach WhatsApp’s security, enabling government clients—including police departments and intelligence agencies—to infiltrate target devices. The suite cost up to $6.8 million for a one-year license and reportedly generated at least $31 million in revenue for NSO in 2019. According to insights from Tamir Gazneli, NSO’s head of research and development, Pegasus was installed on “between hundreds and tens of thousands” of target devices worldwide. Prior to these revelations, the identity of the individuals responsible for sending the malicious WhatsApp messages to successfully deliver the spyware remained a mystery. Historically, NSO has maintained that it possesses no knowledge of its customers' operations and has distanced itself from the cyberattacks executed. However, the newly released documents raise significant questions regarding the validity of these claims. WhatsApp argued in the filings that “NSO’s customers’ role is minimal,” emphasizing that the government clientele need only input the target's phone number and hit "Install" for Pegasus to be installed remotely on the device. This further complicates NSO's narrative and raises concerns about the lack of accountability prevalent in such operations. #WhatsApp #NSOGroup #Pegasus #CyberSecurity

2

SIM Box Investigation: A Comprehensive Guide https://lnkd.in/gsSznyy9

1

Unlocking Success: WPG’s Risk Vulnerability Assessment Services for Japanese Companies https://lnkd.in/g2G9cf3k #WPG #ExecutiveProtection #ArmedSecurity #RiskVulnerabilityAssessment #EstateSecurity #PrivateInvestigations #GoldStandardService #privacyisluxury

1

Available now! A new document which aims to provide a summary of resources pertaining to #drug #surveillance systems in order to better understand #data usage, interpretation, limitations, and analysis of data from these diverse funding agencies. Read Report: https://ow.ly/hvm250RewVr

1

#SAS #TravelSecurity #SecurityServices #Pakistan: The Counter Terrorism Department (CTD) in Khyber Pakhtunkhwa's Dera Ismail Khan district has claimed to have killed eight terrorists involved in attacks on Customs officials. The operation conducted by the CTD resulted in the death of Jahanzaib, the most wanted terrorist. The CTD stated that these terrorists were also responsible for attacks on security forces, target killings, and extortion. It was revealed that they had plans to cause sabotage in the district. The CTD blocked the escape routes of the terrorists and expressed concerns about the presence of facilitators within the local population. Strict actions are being taken against these facilitators as well. This operation comes after two Customs officials were killed and four others injured in an attack near York Toll Plaza in DI Khan. In another incident, six people, including five customs officials, were killed in a firing incident on the Sago Road in Daraban tehsil. According to statistics, Peshawar, Khyber, Bajaur, Tank, Dera Ismail Khan, North Waziristan, and South Waziristan are the areas most affected by terrorism. The Q1 2024 Security Report by the Centre for Research and Security Studies (CRSS) revealed that KP and Balochistan provinces accounted for over 92% of all fatalities and 86% of attacks in the country. KP suffered 51% of all fatalities, while Balochistan suffered 41%, indicating relative peace in other regions with less than 8% of all fatalities. #Investigations #Intelligence #Securityservices #Executiveprotection #Securitymanagement #Travelrisk #Travelsecurity #Riskanalysis #Securitylogistic For info: S.A.S. investigations and security Phone: +39 0463 901545 Web: www.sasinvestigation.com Mail. [email protected]

1

What Surveillance Methods Do Queensland Police Use? In this podcast, Daniel Hannay discusses what surveillance methods are currently being utilised by Queensland police. Listen now: https://lnkd.in/d3uNvFSK #surveillance #surveillancemethods #QueenslandPolice #criminallaw #brisbanecriminallawyers

2

What's in your mitigation package to prevent this?

1

Paris Olympics fertile ground for nation-state hackers, researchers warn. Why it matters: 1. The upcoming summer Olympics in Paris risks being exploited by hackers from Russia, China, and Iran who may pursue political gains, threatening not just France but its allies as well. This is likely to include influence campaigns, espionage, and ransomware attacks. 2. Of all the potential threat actors, Russia is most driven to initiate cyberattacks during the Olympics, possibly due to the banishment of Russian athletes from representing their country at the games, inciting efforts to devalue the international sporting event. 3. Major sporting events like the Olympic games offer a ripe opportunity for ransomware attacks. Attackers might target local businesses and support sectors such as transport and hospitality, exploiting their need to maintain service, in order to demand large ransoms. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/dJHVQYXi

3

On 2nd May, Amnesty International's Security Lab released details of preliminary details of the use of cyber-weapons and highly invasive spyware found in Indonesia. The investigation analyzed details on the sale of spyware and other surveillance technologies to government and non-government entities around the world. The report highlights the growing market for spyware and the risks it poses to individuals and companies. Read our intel brief for more information and analysis below. #cybersecurity #southeastasia #infosec https://lnkd.in/g7W5GbNE

3

Esf Labs News | Google Chrome Patches High-Severity Flaw CVE-2024-11395 in Latest Stable Release | source : https://lnkd.in/giC-4ARF 🚨 Google Chrome Update Alert 🚨 Google has patched a high-severity vulnerability (CVE-2024-11395) in its latest stable release. This flaw poses a security risk, so updating your browser is essential. 📌 Action Required: Update Chrome via "About Chrome" to stay protected. 🔐 Pro Tip: Regular updates are key to strong digital security. #CyberSecurity #ChromeUpdate #StaySecure #GoogleChrome #HighSeverity #UpdateNow #StaySecure #esflabsnews #esflabscybersecuritynews #esflabsfeeds

3

You need a way to keep track of important details, especially when working with a full team of investigators. Record important case entries with text & screenshots, then export your notes to a report when needed. Start today! https://lnkd.in/gc89iGeg #dfir #casemanagement

1

#InFocus 🌍 An inauguration ceremony at the Federal Investigation Agency (FIA) headquarters in Islamabad celebrated the opening of a refurbished Forensic Laboratory and a new Risk Analysis Office. The Forensic Laboratory: 📌 FIA officers, trained by ICMPD, will use the laboratory to forensically analyse suspected forged documents used by criminal groups to facilitate migrant smuggling and trafficking of human beings, among other organised crime activities. 📌 The laboratory was funded by the Danish Ministry of Foreign Affairs. The new Risk Analysis Office: 📌 It will deliver data-driven analysis and evidence-based recommendations to border threats and risks facing Pakistan’s borders, enabling more efficient management of resources. 📌 The forensic laboratory was funded by the European Union and the Ministry of Interior of Austria. Marija Raus, ICMPD’s Head of Region for ICMPD Silk Routes, highlighted: 💬 "The headline today is the improved capacity of the FIA to curb irregular migration. The FIA can pursue an evidence-based, data-driven approach to border management, implemented by officers with the right skills and tools in the right place." 🔗 Discover more at: https://lnkd.in/dhgF3eZ8 #MigrationManagement #MigrationPolicy #MigrationManagement #Pakistan

61

1 Comment