NSO Group Develops Ad-Based Spyware Installation Method for Remote Access
Israeli surveillance firm NSO Group has reportedly developed a new method to install spyware on mobile devices via malicious online ads, exploiting browser vulnerabilities to gain access to microphones and cameras without user consent. This marks an evolution from its known Pegasus software, expanding attack vectors. The claim is based on a translated report from N1 Bosnia; details on the specific vulnerabilities and targets remain unverified, but if confirmed, it represents a significant escalation in covert surveillance capabilities.
Score Breakdown
Part of 2 situations
Israeli Firms Weaponize Ad Networks for Spyware Attacks on Sensitive Targets
An Israeli firm, identified as Discover-Tech, has been confirmed by Citizen Lab and Confiant to be weaponizing digital ad networks for widespread data harvesting and covert spyware deployment. This operation represents a novel supply-chain attack vector, with alleged targeting of journalists, international organizations, and government entities, including Al Jazeera, EU, NATO, and UN websites. The full scope of targets and attribution of specific spyware capabilities remain partially unconfirmed, though NSO Group is also claimed to be developing similar ad-based installation methods.