Private Israeli malware 'Pegasus' used to spy on journalists, activists

Re:Private Israeli malware 'Pegasus' used to spy on journali... by menomatter on Monday July 19, 2021 @10:48AM (#27883242)

What methods are available to normal folks to ensure they don't have these malware? Does factory reset help? Or would this malware reinstall itself? How do I know or check if I'm a target? Do I need to Wireshark and inspect the entire network payloads to find offending packets?

[ Parent | on HN ]

Re:Private Israeli malware 'Pegasus' used to spy on journali... by therealEleix on Monday July 19, 2021 @01:20PM (#27885055)

The methods in use by Pegasus make it impossible to avoid. "Zero Click" malware allows them to take over a device without any interaction needed by the user so even if you factory reset the device, heck, even if you reinstall the OS entirely, Pegasus malware can get back into the device. Until the method they are using to break into devices is found and patched there will be no stopping it except for disconnecting the device from all networks or keeping it powered off.

Edit: They are using 0-Day exploits against mobile clients that take advantage of flaws in default applications like iMessage. Pegasus intrusions have been detected on devices as new as the iPhone 12 running iOS 14.6. This would be a severity rating 10/10 for a CVE, to put it into perspective.

[ Parent | on HN ]

Re:Private Israeli malware 'Pegasus' used to spy on journali... by badkitty99 on Monday July 19, 2021 @02:19PM (#27885682)

Probably wireshark, then

[ Parent | on HN ]

Re:Private Israeli malware 'Pegasus' used to spy on journali... by sdpy on Tuesday July 20, 2021 @04:28AM (#27891241)

Relevant Twitter thread: https://twitter.com/billmarczak/status/1416817352549625858

[ Parent | on HN ]

Re:Private Israeli malware 'Pegasus' used to spy on journali... by pomian on Monday July 19, 2021 @12:21PM (#27884353)

That's a great question. There have been quite a lot of discussions on Pegasus on HN, but I have not seen any one answer that.

[ Parent | on HN ]

Re:Private Israeli malware 'Pegasus' used to spy on journali... by sdpy on Monday July 19, 2021 @04:00PM (#27886687)

Maybe this one: https://news.ycombinator.com/item?id=27876165 > MVT – forensic tool to look for infections on smartphones (github.com/mvt-project)

[ Parent | on HN ]

Re:Private Israeli malware 'Pegasus' used to spy on journali... by pomian on Tuesday July 20, 2021 @01:41PM (#27896753)

That's cool. Thanks. Interesting to see. Not trivial though. Imagine a non techie looking at that. Next step: How to prevent infection?

[ Parent | on HN ]