• AmbitiousProcess (they/them)@piefed.social
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 hours ago

    Depends. Obviously when they say “secret spyware” that means it is, in fact, secret, and we don’t know which spyware they’re using, but as the article notes it could be Paragon Solutions.

    They have a system called Graphite, but that primarily targets just instant messaging platforms. If the article is to be believed when it says it could activate your camera, that would signal to me it’s more likely something from NSO Group, like their Pegasus spyware that can also access your camera, GPS coordinates, and more.

    All of these are going to be reliant on zero-day exploits, essentially exploits that aren’t known to anyone yet and are still unpatched. All exploits will be a little different, but when it comes to mobile spyware, we usually see them delivered either through texts, websites, or email.

    Those attacks can either be someone just receiving the text (even if they don’t click on it, AKA a “zero click” attack), or maybe having to actually go to a particular website with the exploit baked in, or running an attachment from an email.