apple serial number finally forensic analysis

when the spyware is successfully installed on a device) are referred to as “infections” or being “infected” throughout the report, while “targeted” refers to an act of targeting with Pegasus or Candiru spyware that may or may not correspond to a forensically-discovered infection (i.e. Confirmed cases of Pegasus and Candiru hacking (i.e. Further, victims publicly named in this report consented to be identified as such, while other targets chose to remain anonymous. The investigation has uncovered at least 65 individuals targeted or infected with Pegasus or spyware from Candiru, another mercenary hacking company.įorensic evidence was obtained from victims who consented to participate in a research study with the Citizen Lab.

Following these reports, the Citizen Lab, in collaboration with civil society organisations, undertook a large-scale investigation into Pegasus hacking in Spain. The cases were first reported by The Guardian in 2020.

The Citizen Lab assisted WhatsApp in notifying civil society victims and helping them take steps to be more secure. Among the targets were multiple members of civil society and political figures in Catalonia, Spain. At the same time, WhatsApp notified 1,400 users who had been targeted with the exploit. In 2019, WhatsApp patched CVE-2019-3568, a vulnerability exploited by NSO Group to hack Android phones around the world with Pegasus. Explore the data and ask yourself: would you click? Introduction Our latest research is a story of secret hacking capabilities, how a government used them, and the threat they pose to fundamental rights and democracy.

We shared a selection of Pegasus cases with Amnesty International’s Tech Lab, which independently validated our forensic methodology.

The Citizen Lab is not conclusively attributing the operations to a specific entity, but strong circumstantial evidence suggests a nexus with Spanish authorities.

We identified evidence of HOMAGE, a previously-undisclosed iOS zero-click vulnerability used by NSO Group that was effective against some versions prior to 13.2.

Family members were also infected in some cases.

Victims included Members of the European Parliament, Catalan Presidents, legislators, jurists, and members of civil society organisations.

At least two were targeted or infected with both.

At least 63 were targeted or infected with Pegasus, and four others with Candiru.

The Citizen Lab, in collaboration with Catalan civil society groups, has identified at least 65 individuals targeted or infected with mercenary spyware.

Background: Spain, Catalonia, and Surveillance

Apple serial number finally forensic analysis