PEGASUS SPYWARE

Swetha P
232KD
 Introduction Pegasus Spyware Analysis

What is spyware?
• Spyware is a type of malicious software – or malware that is installed on a computing device
without the end user's knowledge. It invades the device, steals sensitive information and internet
usage data, and relays it to advertisers, data firms or external users.
• Any software can be classified as spyware if it is downloaded without the user's authorization.
Spyware is controversial because, even when it is installed for relatively innocuous reasons, it can
violate the end user's privacy and has the potential to be abused.
• Spyware is one of the most common threats to internet users. Once installed, it monitors internet
activity, tracks login credentials and spies on sensitive information. The primary goal of spyware is
usually to obtain credit card numbers, banking information and passwords.

A brief history of spyware

Back in October 1995, the term “spyware” first
appeared in a public forum called Usenet – which was
a distributed internet discussion where users could
post messages in an email-like format. It featured in an
article analyzing the business model then adopted by
Microsoft, in a largely conceptual context.
Spyware made its first significant public impact in 1999,
when the popular freeware game Elf Bowling was
discovered to be laced with tracking software. Also in
that year, Steve Gibson of Gibson Research uncovered a
form of spyware which, under the pretext of advertising,
was actually pilfering confidential information.
A press release for a personal firewall package which
appeared in the year 2000 contained specific reference to
spyware, and marked its official entry in the modern
language of computing. As with other forms of malicious
application, spyware has enjoyed a rapid evolution since its
humble beginnings.

Types of spyware

Adware Mobile spyware Cookies System Monitors Trojans

 Introduction Pegasus Spyware
WHY PEGASUS IS IN THE NEWS
On 19 July 2021, a consortium of 17 international media organizations
published an investigation around a leaked list of phone numbers from across
the world, dubbed the Pegasus Project.
These numbers are allegedly a “target list” of phones hacked/to be hacked by
the Pegasus spyware product sold by Israel’s NSO Group. The list is apparently
notable for its sheer size, as well as for containing the numbers of prominent
journalists, dissidents from various countries, politicians, judges, businessmen,
rights activists and heads of state.
Some targets listed have cooperated with the consortium of media and
Amnesty International for a forensic examination of their devices, and
have found evidence of hacking using the Pegasus suite.
Analysis
NSO GROUP
NSO Group, Israel’s best-known cyber espionage and technology company,
was founded in 2010 by three Israelis in the city of Herzliya. The eleven-year-
old company has made a name for itself around the globe thanks to its
flagship product, the Pegasus spyware.
Although it is best known for its cyberespionage products, such as
Pegasus, NSO is also working on a “counter-drone” system called Eclipse.
In addition to Pegasus and Eclipse, the company offers two other
products: Pixcell, and Landmark.
Since 2016, when NSO first gained public attention, a number of
criminal complaints have been filed against the company on a global
scale. The most well-known of these was WhatsApp's lawsuit in 2019.
To this day, the company is dealing with dozens of lawsuits filed by
various states and companies.
 Introduction Pegasus Spyware Analysis

WHAT SETS PEGASUS APART FROM OTHER SPYWARE?

This indicates that Pegasus is more than just spyware; a strategically produced cyberweapon. We
should also emphasize that Pegasus has been described by Israeli experts as “military-grade
spyware”. In conclusion, the following quote about Pegasus sums it all up: “If your device becomes
infected with Pegasus, it no longer belongs to you.”

Information obtained by Pegasus from a targeted device:

Phone calls (listens to and records phone calls in real-time)
Camera and microphone (collects visual and auditory data from the surroundings in real-time)
Text messages (can access and read all messages)
Chatting apps (reads conversations in applications like WhatsApp)
Emails (reads incoming and outgoing emails and attachments)
Location information (tracks location in real-time and records location data)
Device properties, settings, and network information
Web browser records (views all web browsers in real-time)
File transfers (reads the files that are sent and received)
Calendar activities and contacts

The Pegasus spyware, which could be categorized as a strategic cyber weapon, is

only sold to national intelligence services and law enforcement agencies of
states, not to individuals or businesses. All sales and other negotiations are
conducted directly with NSO experts. These sales must also be approved by the
Israeli Ministry of Defense. In other words, Pegasus can only be sold to states
that Tel Aviv approves of.
 Introduction
Risks due to spyware
The point reached by the global cyberweapons market is quite
alarming. There are significant risks not only to individuals and
states but also to businesses and international organizations.
The fact that countries are investing in spyware technology to
spy on their own citizens is very disturbing.
Cause for worry
The frightening trajectory of the cyberweapons
industry is a cause for concern and world leaders
should come together to put an end to this horrific
trand. They should partner with technology companies
and spread awareness to the general public on how
they can keep their phones and other gadgets safe
from spyware.
Pegasus Spyware Analysis
Threat to national security
Such cyberweapons, which could be seen as a matter of national security, could
be used by two hostile states against each other. Because of their practicality and
speed, states may turn to such "digital spies" for intelligence gathering even
during times of peace.
It could cause unnecessary spite between countries which could lead to the loss
of life and property which is truly unwarranted.
Indian Government
Although the Indian Government refuted claims of having used
the Pegasus spyware, it was later found out that the mobile
phones of more than 300 Indians have been targeted for
hacking through the Pegasus spyware. The need of the hour is
much stronger cyber surveillance laws. Cyber surveillance can
help to curb terrorist activities and find out about suspected
illegal activities but there should be a way to check if this
surveillance is being used on the general public.
References

https://www.aa.com.tr/en/world/analysis-notorious-pegasus-spyware-
continues-to-be-debated/2316867#
https://www.theverge.com/22589942/nso-group-pegasus-project-
amnesty-investigation-journalists-activists-targeted
https://www.freepressjournal.in/india/pegasus-spyware-controversy-the-
story-so-far
https://www.firstpost.com/tech/news-analysis/the-pegasus-leak-what-
you-need-to-know-right-now-9819351.html

THANK YOU!