As part of Google's efforts to track the activities of commercial spyware vendors,Dear Utol (2025): TBrgy. Chairman Episode 39 the company's Threat Analysis Group (TAG) released a report Thursday on spyware campaigns targeting Android and iOS users.
Google TAG researchers Benoit Sevens and Clement Lecigne go into detail about the use of entrepreneurial grade spyware dubbed "Hermit." This sophisticated spyware tool allows attackers to steal data, private messages and make phone calls. In their report, TAG researchers attributed Hermit to RCS Labs, a commercial spyware vendor based in Italy.
Hermit poses many significant dangers. Due to its modularity, Hermit is quite customizable, allowing the functions of the spyware to be altered to the will of its user. Once fully situated on a target's phone, attackers can harvest sensitive information such as call logs, contacts, photos, precise location, and SMS messages.
An explainer:What is 'hermit spyware' and how can you protect yourself from it?
Sevens and Lecigne's full report details the ways in which attackers can access both Android and iOS devices through the use of clever tricks and drive-by attacks. Potential targets of this scam will have their data disabled through their ISP carrier before sending a malicious link via text to get them to ‘fix’ the issue. If that doesn't work, targets will be tricked into downloading malicious apps masqueraded as messaging applications.
Just last week, cybersecurity firm Lookout reported the use of Hermit by agents working in the governments of Kazakhstan, Syria, and Italy. Google has already identified victims in these countries, stating that "TAG is actively tracking more than 30 vendors with varying levels of sophistication and public exposure selling exploits or surveillance capabilities to government-backed actors."
The Milan-based company claims to provide "law enforcement agencies worldwide with cutting-edge technological solutions and technical support in the field of lawful interception for more than twenty years." More than 10,000 intercepted targets are purported to be handled daily in Europe alone.
When reached out for comment by The Hacker News, RCS Labs said its "core business is the design, production, and implementation of software platforms dedicated to lawful interception, forensic intelligence, and data analysis" and that it "helps law enforcement prevent and investigate serious crimes such as acts of terrorism, drug trafficking, organized crime, child abuse, and corruption."
Still, the news of the spyware being used by state government agents is concerning. Not only does it erode trust in the safety of the internet but it also puts at risk the lives of anyone a government considers an enemy of the state such as dissidents, journalists, human rights workers, and opposition party politicians.
"Tackling the harmful practices of the commercial surveillance industry will require a robust, comprehensive approach that includes cooperation among threat intelligence teams, network defenders, academic researchers, governments, and technology platforms," Google TAG researchers wrote. "We look forward to continuing our work in this space and advancing the safety and security of our users around the world."
Topics Cybersecurity
Galaxy S9+ vs Pixel 2 XL Camera
Ron Howard teases Star Wars fans again with a cryptic Han Solo tweet
A little rocket will launch some tiny satellites to space
Tom Cruise shuts down theory he had fake butt in 'Valkyrie'
DDR4 Memory at 4000 MT/s, Does It Make a Difference?
Whoops, a hacker found a way to steal your passwords from macOS High Sierra
Today's Google Doodle features 19 games to celebrate Google's 19th birthday
If the iPhone X arrives late, blame 'Romeo and Juliet'
Analyzing Graphics Card Pricing: May 2018
Amazon is showing off a lot of new Alexa
Why Building a Gaming PC Right Now is a Bad Idea, Part 2: Insane Graphics Card Prices
Intel debuts an experimental 'self
Sportscaster Dale Hansen's take on the #TakeAKnee protests is an absolute must
Dyson really wants to clean everything, so it's developing an electric vehicle
Nintendo Switch 2 preorder just days away, per leak
After destroying Puerto Rico, Hurricane Maria turned into even more of a dick
This video of Sean Hannity vaping on camera is mesmerizing
6 reasons Trump should stay away from longer tweets
Keeping Hope Alive
Leigh Bardugo talks 'The Language of Thorns' and the dark power of folktales
Pleasures of Dance: 5 Paintings by Jesse MockrinAfter Ned Fulmer's departure, what's next for The Try Guys?How Do We Measure Vagueness (Or, When a Heap Is Not a Heap)Kenneth Lonergan Is Back With “Manchester by the Sea”Classic Attitude: Paintings by Helen LundebergArtists Explore the Archetype of the Teen GirlBest deals of the day Oct. 5: Shark air purifier, Amazon Echo devices, and Sony 4K TVsLove Says the Day: Remembering David MancusoThe SilentPoem: “The Mutes,” by Denise LevertovRichard Howard Will Receive Our 2017 Hadada AwardEcho Show 5 deal: Save $50 at AmazonWhen Poets Packed Stadiums and Literature Was MoneyWhat Midcentury Women Artists Had to Put Up WithIn Memory of Leon Russell, Watch “A Poem Is a Naked Person”I Will Pass Through This: Solace and Inspiration from WritersStaff Picks: Sophie Pinkham, Robyn Creswell, Kelly ReichardtHere’s Some Unusually Relevant Trollope for Election NightDid This Belgian Count Have a Bed Big Enough for 50 People?Leonard Cohen: “Poetry Is Just the Evidence of Life” Google's Year in Search 2023 was ruled by 'The Last of Us' On Cussing by Katherine Dunn NYT's The Mini crossword answers for December 19 NYT's The Mini crossword answers for December 21 Biird hid a "Jingle Bells" Porn site names 'giantess' the 2024 fetish of the year 'Percy Jackson and the Olympians' review: The adaptation fans have been waiting for Apple's iPhone now offers roadside assistance with Verizon One Word: Salty by Myriam Gurba [Update] Dropbox responds to accusations of 'hiding' AI sharing button, data leakage A Figure Model’s (Brief) Guide to Poses through Art History by Larissa Pham Best digital gift deal: Headspace subscriptions 30% off Robert Lowell Dressed as Santa by Saskia Hamilton Trash Talk: On Translating Garbage by Lina Mounzer Reimagining Masculinity by Ocean Vuong The best Gag City posts on X, in honor of Pink Friday 2 Our Town and the Next Town Over by Joanna Howard How to watch USF vs. SU football livestreams: kickoff time, streaming deals, and more Microsoft Copilot now lets you create AI songs from text prompts The Paris Review Staff’s Favorite Books of 2019 by The Paris Review
1.649s , 10133.6796875 kb
Copyright © 2025 Powered by 【Dear Utol (2025): TBrgy. Chairman Episode 39】,Pursuit Information Network