history about pegasus, origin, and how it works

1. pegasus
spyware
SUBMIITED BY: PREETI
101CTMSDS2021045
Malware analysis
Submitted to: Mr. Partik Patel
SUBJECT PROFESSOR
TA2 ASSIGNMENT

2. A spyware is any malicious software designed to enter your computer device,
gather your data, and forward it to a third-party without your consent.
it is a Trojan horse that can be sent "flying through the air"
to infect phones.
the Israeli company marketing it as a tool to track criminals and
terrorists for targeted spying and not mass surveillance.
NSO Group sells the software to governments only.
A single licence, which can be used to infect several smartphones, can cost
up to Rs 70 lakh
About:

3. Origin:
Pegasus is a spyware developed by the Israeli cyberarms firm NSO Group that can
be covertly installed on mobile phones (and other devices) running most versions
of iOS and Android.
Pegasus, developed by NSO Group, is perhaps the most powerful spyware ever
created. It is designed to infiltrate smartphones — Android and iOS — and turn
them into surveillance devices.

4. Oops!
Designed to never use more than 5% of the space on the phone
When unable to transmit, it collects and stores data in an encrypted buffer
Removes data on a first-in first-out basis if it has not been able to
transmit for a while.
it does not transmit data when a smartphone is roaming, unless it is on Wi
Fi. This is to avoid the scrutiny that may follow high data charges

5. Brief history of Pegasus:
2016: Researchers at Canadian
cybersecurity organization The Citizen
Lab first encountered Pegasus on a
smartphone of human rights activist
Ahmed Mansoor.
September 2018: The
Citizen Lab published a report that
identified 45 countries in which Pegasus
was being used. As with the latest
revelations, the list included India.

6. History:
October 2019: WhatsApp
revealed that journalists and human
rights activists in India had been
targets of surveillance by operators
using Pegasus.
July 2021: The Pegasus Project, an
international investigative journalism
effort, revealed that various governments
used the software to spy on government
officials, opposition politicians,
journalists, activists and many others.
It said the Indian government used it to
spy on around 300 people between 2017 and
2019.

7. Once installed on a phone, I can intercept and steal
more or less any information on it,
including SMSes, contacts,
call history,
calendars,
emails and browsing histories.
I can use your phone’s microphone to record calls and
other conversations,
o secretly film you with its camera,
o or track you with GPS.
Click to add text

8. How does it work?
 Pegasus exploits undiscovered vulnerabilities, or bugs, in Android and iOS.

A previous version of the spyware —
 from 2016 — infected smartphones using a technique called “spear-fishing”: text messages or
emails containing a malicious link were sent to the target. It depended on the target
clicking the link—a requirement that was done away with in subsequent version.
 By 2019, Pegasus could infiltrate a device with a missed call on WhatsApp and could even
delete the record of this missed call, making it impossible for the user to know they had
been targeted. In May that year, WhatsApp said Pegasus had exploited a bug in its code to
infect more than 1,400 Android phones and iPhones this way, including those of government
officials, journalists and human rights activists. It soon fixed the bug.
Pegasus also exploits bugs in iMessage, giving it backdoor access to millions of iPhones.
The spyware can also be installed over a wireless transceiver (radio transmitter and
receiver) located near a target.
Ø Transmitted by a WhatsApp call to the target phone. Enters even if the call is not answered

9. How to stay
protected?
Although it may sound obvious, you should limit
physical access to your phone. Do this by enabling
pin, finger or face-locking on the device.
Make sure your device is updated with any relevant
patches and upgrades. While having a standardized
version of an operating system creates a stable
base for attackers to target, it’s still your best
defence. If you use Android, don’t rely on
notifications for new versions of the operating
system. Check for the latest version yourself, as
your device’s manufacturer may not be providing
updates.

10. • I sincerely appreciate that I’ve had this opportunity to present to you.
Take care ,
stay away from
Pegasus