Since we are talking about Pegasus, it is worth mentioning Chrysaor.

Chrysaor was distributed to smartphones via a simple text message. The message contained a link to download the tool, hidden under the guise of an app that is not yet available for download.

Once Chrysaor takes over, it collects call log data from WhatsApp, Facebook, Twitter, Skype and Gmail . This dangerous malware also accessed the camera and microphone, took screenshots and acted as a keylogger by recording keystrokes.

It included a self-destruct feature. If the malware detects that it will be detected, it removes itself. This is why it managed to remain undetected for several years.

In addition to these tools, I want to show you a few incidents and a github spyware thread so you can take a look for yourself for security reasons.🚧

android spyware thread

Spyware thread with various systems from android to wibdows

Thread with various rath viruses and spyware for android

Rails c&c web app for spying on android devices

Ghost Framework Android post exploitation platform

Directory of papers on zero-day vulnerabilities found to be exploitable in the wild . I strongly advise you to read it for your security precautions

A collection of exploits for Android

Chrome Android zero-day vulnerability

So how do you protect yourself from something like this ?💊

How to protect yourself from advanced spyware on Android ?🔋

Reboot daily. Saving the latest versions of Android is difficult, many APTs and exploit vendors avoid saving at all

Keep up to date with your software and on it's apps etc , install the latest patches. This is important to avoid many zero day vulnerabilities.

Never click on links received in text messages.

Do not use chromium browsers. They have been proven to have many more vulnerabilities for your infection.

Always use a VPN(and not a free one, because then your data will be collected by it🙃 already). Some exploits are delivered via GSM operator MitM attacks, http browsing or DNS hijacking. Vpn can help with these attacks .
Install a security package that scans for malware, checks and alerts if the device is rooted.

Always check network traffic with live IoC. The setup could include a permanent Wireguard vpn connection to a server under your control that uses some kind of pihole to filter out unwanted stuff and logs all traffic for further inspection.

How do you protect yourself on ios?🍏

Same as on android, but with a few tweaks.

Do iTunes backups once a month. This allows you to diagnose and find infections later, with Amnesty International's wonderful MVT package

Run sysdiags frequently and save them to external backups. Expert artifacts can help you determine later if you've been targeted by spyware

Disable iMessage and FaceTime. Since they are built into iOS and enabled by default, making them an attractive exploitation vector
#intelligence_services #virus #social_engineering #protection #malware #android #browsers #decentralizatio #mobile #anonymity #spying #cve #exploit