Why is it in the News?

Apple has cautioned its users in India and 91 other countries that their iPhone may have come under attack from “mercenary spyware”, including Pegasus, a malware developed by the Israeli company NSO Group.

What are Mercenary Spyware Attacks?

• Mercenary spyware attacks represent an elevated level of cyber threat, characterized by their intricate nature and highly targeted approach.
• These attacks, surpassing typical cybercriminal activity and consumer malware, are meticulously crafted to infiltrate specific individuals with significant resources.
• Due to their sophisticated design and substantial investment, mercenary spyware attacks pose a formidable challenge in terms of detection and prevention.
  • Despite their potency, they have primarily targeted select users, leaving the majority relatively unaffected.
• This breed of cyber threat stands as one of the most advanced and elusive globally, prompting tech giant Apple to refrain from attributing them to specific perpetrators or regions.
• The primary objective of mercenary spyware is to clandestinely infiltrate smartphones and other devices, operating without the user's knowledge or consent.
  • These surveillance tools are capable of monitoring movements, intercepting communications, and pilfering sensitive data.
• In troubling instances, reports indicate that governments, intelligence agencies, and law enforcement bodies have procured mercenary spyware for surveillance purposes, often targeting political dissidents and activists.
• Key players in the production of mercenary spyware include the NSO Group, FinFisher, and Hacking Team.
  • The NSO Group's flagship spyware, Pegasus, facilitates remote infiltration of devices, granting access to calls, emails, messages, and various files.
  • Similarly, FinFisher's FinSpy can intercept keystrokes, access data, and activate microphones and cameras without authorization.
  • The Hacking Team's Galileo, also known as the Remote Control System (RCS), possesses similar capabilities, including keystroke capture, video call recording, and unauthorized access to device components like the camera and microphone.

About Pegasus Spyware:

• Pegasus Spyware, crafted by Israel's NSO Group, represents a potent cyber threat.
• This sophisticated malware is engineered to exploit zero-click vulnerabilities, granting it access to smartphones without any interaction from the user.
• Once infiltrated, Pegasus gains full control over the targeted device, enabling it to extract a wealth of data, including emails, texts, and phone calls.
• Additionally, it possesses the capability to remotely activate the smartphone's camera and microphone, further compromising the user's privacy.

What are Spyware and Malware?

Spyware:

• Spyware is a type of software that secretly collects information about a user's activities on their computer or device without their knowledge or consent.
• It may track keystrokes, capture browsing habits, record personal information, or monitor online activities.
• Spyware often operates stealthily in the background, making it difficult for users to detect.

Malware:

• Malware, short for malicious software, is a broad term that encompasses various types of harmful software designed to disrupt, damage, or gain unauthorized access to computer systems or networks.
• Malware includes viruses, worms, trojans, ransomware, and other malicious programs.
• Unlike spyware, which focuses on gathering information covertly, malware may aim to corrupt files, steal data, spread across networks, or carry out other harmful actions.
• Malware can enter a system through email attachments, infected websites, removable media, or software downloads from untrusted sources.