New commercial spyware for phones

Google researchers are reporting on spyware that is active on both Apple and Android smartphones – the spyware is called Hermit and Google has taken steps to protect Android users. The software developed and marketed by RCS Lab, based in Milan, will exfiltrate messages ,contacts and password information from targeted phones. The company website claims it has international law enforcement clients. Targeted phones have been discovered in Italy and Kazakhstan – but neither government has commented on the use of the spyware.

Apple and Android phones hacked by Italian spyware, says Google | Hacking | The Guardian

Hermit may not be as sophisticated as Pegasus, but it does join Pegasus as commercial spyware that governments can buy – even if they do not have the technical ability to develop their own.

Pegasus is not out of the headlines

The Israeli spyware company NSO Group is claiming that “more than five” European Union governments have purchased Pegasus spyware from them. So does that mean the UK government is not a customer or are they included among the other forty or so customers?

NSO claims ‘more than 5’ EU states used its Pegasus spyware • The Register

Clive Catton MSc (Cyber Security) – by-line and other articles