Last updated: June 30, 2024
Pegasus still talk about him. It is apparently used so frequently by various governments around the world. Indeed, some cases of hacking of phones by Pegasus are frequently reported every few months.
Today, most communication applications now use end-to-end encryption by default, providing impenetrable protection for online conversations. However, this poses a challenge for governments when it comes to oversight. To meet this need, Pegasus was born.
Pegasus, what is it?
Pegasus is a spyware for iOS et Android developed by the Israeli company NSO Group, specializing in the development of spyware.
The Pegasus software is intended for use only by governments to monitor suspected terrorists or other serious crimes. However, in reality, it is also used by democratic and authoritarian regimes to follow journalists, political opponents and human rights activists.
Once installed, Pegasus can collect sensitive data, like passwords, text messages, calls, photos, audio files, etc. It can also activate the camera and microphone to record the target's activities in real time. Additionally, Pegasus can be used to track the geolocation of the target, control user actions on the phone, and even deploy other malware to the device.
Pegasus spyware installation methods?
Pegasus can be installed on a target device in several different ways, including:
Zero Day Attack
A zero-day attack is a computer vulnerability that can be exploited by hackers before developers are aware of its existence and take steps to fix it.
In this specific case, the attack occurs when a call is made via whatsapp or another VoIP application to a target phone. If the vulnerability is present, malicious Pegasus code can be installed on the phone, even if the person never answered the call.
The fact that the installation occurs even if the person never answered the call is what makes this kind of attack dangerous. The phone user has no idea that their device has been compromised, which means an attacker can collect sensitive information undetected.
Spear phishing attack
Spear phishing attack is a sophisticated and dreadful way to get Pegasus spyware installed on a target device. It targets a specific person by using information manipulation techniques to convince them to click on a malicious link. This link can be sent by SMS, iMessage or WhatsApp.
The latter, seems to come from a reliable source, but in reality, it exploits software vulnerabilities to discreetly install Pegasus on the target's device.
This method is particularly pernicious because it relies on the confidence and naivety of the target to succeed. Attackers can use target-specific information to make their attack more convincing, and the target can be tricked into thinking they are receiving a legitimate message.
It is therefore crucial to be vigilant and not to click on links from unreliable or unknown sources.
Network injection attack
Network injection attack is a dangerous tactic used to compromise mobile phones without user consent. By using this technique, the attacker can thus change the behavior of the mobile phone to redirect it to download Pegasus, for example, without the interaction of the targeted person.
To carry out this attack, an attacker needs to monitor and manipulate the target's internet traffic. This can be achieved using a device called "IMSI Catcher".
Un IMSI Catcher is a technical device that can be used to monitor mobile communications in a given area by simulating a mobile phone network. Nearby mobile devices then connect to this fictitious network instead of their real network, allowing the IMSI Catcher to monitor and collect communications information, including location data, phone numbers called.
The Powerful Features of Pegasus Spyware
Pegasus spy software can do many things to spy on a cell phone user:
- Collect personal information: Pegasus may collect information such as text messages, phone calls, emails, photos, etc.
- Track location: Pegasus can track the geographic location of the user in real time. The attacker knows where the user is at all times.
- Record conversations: Pegasus can record audio and video conversations, even voice calls on WhatsApp, Viber, Skype, etc.
- Access the camera and microphone: Pegasus can access the phone's camera and microphone. Indeed, the attacker can listen and see what is happening around the user.
- Take full control of the phone: Pegasus can take full control of the phone, which means the person controlling Pegasus can do whatever they want with the phone, such as sending messages, erasing data, etc.
Conclusion
In conclusion, Pegasus is a very powerful spy software which can collect lots of information about a cell phone user including messages, calls, locations, audio and video conversations etc. He can also take full control of the phone.
However, it is important to note that using this kind of software without user's permission is illegal in many countries and may violate user's privacy and rights. Therefore, it is important to take security measures to protect personal information and online data.