views
Google’s security group has found as many as 5 zero-day vulnerabilities that were used to install spyware called Predator to infect Android smartphones. Google has its Threat Analysis Group which has identified the threat posed by different actors. It says the Predator spyware has been developed by a commercial surveillance company Cytrox.
TAG also mentions that the attacks took place between August and October last year. The attackers used the zero-day exploits to target Chrome OS and Android platform to install the spyware on Android phones that were up-to-date on their security patches.
Also Read: WhatsApp In India Now Lets You Download PAN Card, Driving Licence Via This Chatbot: How It Works
The most worrying part is that Cytrox is likely to have sold the spyware to attackers who seem to have the backing of the government of their respective countries. TAG highlights that the threat actors were from Egypt, Madagascar, Serbia, Spain and Indonesia among others.
These are not the names you would associate with spyware intrusions, but Google’s TAG findings suggest the government in these countries has looked into surveillance of particular individuals. Predator has all the imprints of another spyware that we have heard a lot about in recent times, called Pegasus, which has been developed by the NSO Group and allegedly bought by governments to spy on targeted people.
The report further explains the mode of attacks deployed to infect devices with spyware. And it is hardly surprising to hear they send one-time access URLs via email, and when the person opens the link, they end up going to a domain owned by the attacker for a few seconds when the spyware is installed, and then redirected to the original website source.
Also Read: Apple Music Student Plan Gets Costlier In India And Other Countries: Here’s What You Pay Now
The TAG team says the spyware wasn’t meant to attack millions of users. In fact, they say the targets were tens of users, suggesting a clear thought out strategy to attack specific individuals or entities with the spyware for surveillance.
Read all the Latest Tech News here
Comments
0 comment