13/8/2019 HIDE AND SEEK: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries - The Citizen Lab Research Targeted Threats HIDE AND SEEK Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries By Bill Marczak, John Scott-Railton,...
More
13/8/2019 HIDE AND SEEK: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries - The Citizen Lab Research Targeted Threats HIDE AND SEEK Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries By Bill Marczak, John Scott-Railton, Sarah McKune, Bahr Abdul Razzak, and Ron Deibert September 18, 2018 اﻗرأ ﻣﻠ ّﺧص اﻟﺗﻘرﯾر ﺑﺎﻟﻠﻐﺔ اﻟﻌرﺑﯾﺔ ﻣن ھﻧﺎ In this post, we develop new Internet scanning techniques to identify 45 countries in which operators of NSO Group’s Pegasus spyware may be conducting operations. Key Findings Between August 2016 and August 2018, we scanned the Internet for servers associated with NSO Group’s Pegasus spyware. We found 1,091 IP addresses that matched our fingerprint and 1,014 domain names that pointed to them. We developed and used Athena, a novel technique to cluster some of our matches into 36 distinct Pegasus systems, each one which appears to be run by a separate operator. https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pega
Less