As part of Google's efforts to track the activities of commercial spyware vendors,Love Conquest the company's Threat Analysis Group (TAG) released a report Thursday on spyware campaigns targeting Android and iOS users.
Google TAG researchers Benoit Sevens and Clement Lecigne go into detail about the use of entrepreneurial grade spyware dubbed "Hermit." This sophisticated spyware tool allows attackers to steal data, private messages and make phone calls. In their report, TAG researchers attributed Hermit to RCS Labs, a commercial spyware vendor based in Italy.
Hermit poses many significant dangers. Due to its modularity, Hermit is quite customizable, allowing the functions of the spyware to be altered to the will of its user. Once fully situated on a target's phone, attackers can harvest sensitive information such as call logs, contacts, photos, precise location, and SMS messages.
An explainer:What is 'hermit spyware' and how can you protect yourself from it?
Sevens and Lecigne's full report details the ways in which attackers can access both Android and iOS devices through the use of clever tricks and drive-by attacks. Potential targets of this scam will have their data disabled through their ISP carrier before sending a malicious link via text to get them to ‘fix’ the issue. If that doesn't work, targets will be tricked into downloading malicious apps masqueraded as messaging applications.
Just last week, cybersecurity firm Lookout reported the use of Hermit by agents working in the governments of Kazakhstan, Syria, and Italy. Google has already identified victims in these countries, stating that "TAG is actively tracking more than 30 vendors with varying levels of sophistication and public exposure selling exploits or surveillance capabilities to government-backed actors."
The Milan-based company claims to provide "law enforcement agencies worldwide with cutting-edge technological solutions and technical support in the field of lawful interception for more than twenty years." More than 10,000 intercepted targets are purported to be handled daily in Europe alone.
When reached out for comment by The Hacker News, RCS Labs said its "core business is the design, production, and implementation of software platforms dedicated to lawful interception, forensic intelligence, and data analysis" and that it "helps law enforcement prevent and investigate serious crimes such as acts of terrorism, drug trafficking, organized crime, child abuse, and corruption."
Still, the news of the spyware being used by state government agents is concerning. Not only does it erode trust in the safety of the internet but it also puts at risk the lives of anyone a government considers an enemy of the state such as dissidents, journalists, human rights workers, and opposition party politicians.
"Tackling the harmful practices of the commercial surveillance industry will require a robust, comprehensive approach that includes cooperation among threat intelligence teams, network defenders, academic researchers, governments, and technology platforms," Google TAG researchers wrote. "We look forward to continuing our work in this space and advancing the safety and security of our users around the world."
Topics Cybersecurity
Marseille vs. Atalanta 2024 livestream: Watch Europa League live for freeRabbit R1 update boosts battery lifeBest tablet deal: The Samsung Galaxy Tab S6 Lite (64GB) is on sale for $80 off at AmazonLenovo leads the global PC market in Q3 · TechNodeA parent's guide to Skibidi Toilet: What is it and why is it so popular?Behold, the very bizarre Facebook autoTSMC's second plant in Japan may receive $6 billion subsidy · TechNodeHere's who will use the world's fastest supercomputerBig UN extinction crisis report paints grim future for life on EarthDigital torchbearer to perform at closing ceremony of 19th Asian Games · TechNodeApple Watch feature becomes first digital health tech to receive this FDA approvalFritz vs. Cerundolo 2024 livestream: Watch Madrid Open for free'The Idea of You's August Moon gives us the boy band bops we deserveNYT's The Mini crossword answers for May 1NetEase Youdao releases AITencent Music partners with Qualcomm to launch AIBYD supplier RoboSense reports monthly shipments of 20,000+ lidar sensors · TechNodeSRH vs. RR 2024 livestream: Watch IPL for freeTikTok reduces requirement for effect creators to get payout · TechNodeSpotify starts hiding song lyrics behind paywall Line joins in the Snapchat game with posts that only last 24 hours China just dethroned the U.S. as the largest iOS app spender 'Overwatch' player lands a double kill while using a bow for a controller Josh Brown sidelined while Torrey Smith rips NFL for paying him anyway 8 things we learned from PBS's excellent documentary 'Hamilton's America' Aaron Rodgers showed up at a press conference dressed like The Dude Obama subtly roasts Samsung for Galaxy Note7 The Walking Dead Season 7 spoilers: Who Does Negan Kill? Photo series will change the way you see people with disabilities Someone please put this 'Game of Bones' bulldog in charge of Westeros Victoria Beckham just announced a very affordable collaboration with Target Article on 'fairy bread' incurs the wrath of an angry nation Hamsters make the wizardry of 'Harry Potter' even more magical Watch tiny gourmet dishes get prepped with sublime skill Scarlett Johansson's next business venture is a foray into gourmet popcorn Airbnb files lawsuit against New York Couple recreates romantic wedding photo shoot at their local Target B&W P9 Signature: Amazing sound with a hefty price Samsung will only launch 4G LTE smartphones in India Pierce Brosnan 'shocked and saddened' by 'deceptive' Indian pan masala ad
2.8899s , 10137.1484375 kb
Copyright © 2025 Powered by 【Love Conquest】,Pursuit Information Network