Discover and read the best of Twitter Threads about #forcedentry
Most recents (2)
🚨MAJOR INVESTIGATION: uncovering #GeckoSpy.
An espionage operation using #Pegasus spyware against #Thailand's pro-democracy movement.
THREAD on our findings 1/
Our @citizenlab collaborators: @iLawFX & @DigitalReachSEA w/validation by @AmnestyTech
citizenlab.ca/2022/07/geckos…
An espionage operation using #Pegasus spyware against #Thailand's pro-democracy movement.
THREAD on our findings 1/
Our @citizenlab collaborators: @iLawFX & @DigitalReachSEA w/validation by @AmnestyTech
citizenlab.ca/2022/07/geckos…
2/ In 2020, #Thailand's government triggered pro-democracy protests by disbanding a popular opposition party.
Protests continued into 2021, and were met with repression & violence.
Key figures were harassed, arrested & jailed.
Now, we know many were hacked, too.
Protests continued into 2021, and were met with repression & violence.
Key figures were harassed, arrested & jailed.
Now, we know many were hacked, too.
3/ The #GeckoSpy investigation began in Nov 2021... when @Apple notified users likely targeted w/#NSOGroup’s FORCEDENTRY exploit.
Multiple activists in #Thailand received them.
Some got in touch with us @citizenlab & our collaborators including @iLawFX & @DigitalReachSEA
Multiple activists in #Thailand received them.
Some got in touch with us @citizenlab & our collaborators including @iLawFX & @DigitalReachSEA
🚨 UPDATE YOUR APPLE DEVICES NOW🚨
We caught a zero-click, zero day iMessage exploit used by NSO Group's #Pegasus spyware.
Target? Saudi activist.
We reported the #FORCEDENTRY exploit to @Apple, which just pushed an emergency update.
THREAD 1/
citizenlab.ca/2021/09/forced…
We caught a zero-click, zero day iMessage exploit used by NSO Group's #Pegasus spyware.
Target? Saudi activist.
We reported the #FORCEDENTRY exploit to @Apple, which just pushed an emergency update.
THREAD 1/
citizenlab.ca/2021/09/forced…
2/ Here's the story of the #FORCEDENTRY exploit:
Back in Mach my colleague @billmarczak was examining the phone of a Saudi activist infected w/#Pegasus spyware. Bill did a backup at the time.
A recent a re-analysis yielded something interesting: weird looking ".gif" files.
Back in Mach my colleague @billmarczak was examining the phone of a Saudi activist infected w/#Pegasus spyware. Bill did a backup at the time.
A recent a re-analysis yielded something interesting: weird looking ".gif" files.
3/ Thing is, the ".gif" files...were actually Adobe PSD & PDF files...and exploited Apple’s image rendering library.
Result? Silent exploit via iMessage.
Victim sees *nothing,* meanwhile #Pegasus is silently installed & their device becomes a spy in their pocket.
Result? Silent exploit via iMessage.
Victim sees *nothing,* meanwhile #Pegasus is silently installed & their device becomes a spy in their pocket.
