News for hackers. Stuff that matters.

A comment on How NSO's Pegasus Is Used to Spy on Journalists.

Re:How NSO's Pegasus Is Used to Spy on Journalists by jaquer_1 on Sunday July 18, 2021 @03:32PM (#27875871)
How would one detect compromised devices?
[ Parent | on HN ]
Re:How NSO's Pegasus Is Used to Spy on Journalists by _fzslm on Sunday July 18, 2021 @06:07PM (#27877114)
no idea if this is still the case for the latest version of pegasus. but in 2019, it was observed that the malware tries to hide its tracks by cleaning DataUsage.sqlite, a database file that stores records of tx/rx on mobile data. but it left an observable inconsistency in doing so, wiping only one of the two pertinent tables. source[0]

[0] https://twitter.com/billmarczak/status/1416801514685796352

[ Parent | on HN ]
Re:How NSO's Pegasus Is Used to Spy on Journalists by dillondoyle on Sunday July 18, 2021 @06:29PM (#27877255)
They released this on github. I would love for them to put out a simple tool that allows you to lookup if your number is on the leaked list, they can copy that has my password been pwned technique to make it safe

https://github.com/mvt-project/mvt

[ Parent | on HN ]
Re:How NSO's Pegasus Is Used to Spy on Journalists by mandeepj on Sunday July 18, 2021 @08:14PM (#27877937)
> How would one detect compromised devices?

monitor the outgoing traffic ?

[ Parent | on HN ]