Pegasus Spyware: NSO Group's Zero-Click Exploits Explained

What is Pegasus Spyware?

• 💡 Pegasus is the flagship product of the NSO Group, an Israeli spyware vendor.
• 🎯 It is designed for remotely hacking mobile devices, most notably iPhones, using zero-click exploits.
• 🔑 The spyware was first released in 2011 and is sold exclusively to government customers.

NSO Group's Stated Intentions vs. Criticisms

• 🚀 NSO Group states its intention is to combat terrorism and crime.
• ⚠️ However, the company has faced heavy criticism for selling Pegasus to authoritarian governments.
• 🗣️ These governments have allegedly abused the spyware to target activists, journalists, and political dissidents.

High-Profile Abuses and US Sanctions

• 🇸🇦 In a notable incident, the Saudi Arabian government allegedly used Pegasus to monitor Jamal Khashoggi before his assassination.
• 🇺🇸 In November 2021, the Biden administration banned the NSO Group from doing business in the US due to its tools being used for malicious targeting.
• 📉 By December 2021, NSO Group was reportedly considering shutting down the Pegasus unit and selling the company.

Technical Details of Zero-Click Exploits

• ⚡ Pegasus allows operators complete control over a targeted phone via a zero-click exploit, requiring no user interaction.
• 💬 Exploits are often achieved by targeting vulnerabilities in messaging services, like iMessage, through unsolicited messages.
• 🔬 Google's Project Zero detailed an exploit using a vulnerability in iOS's core graphics PDF parser, leveraging a compression algorithm to emulate computational circuits.

Journalist Insights on Pegasus

• 📰 Journalist Nicole Perlroth highlighted the shift from click-based exploits to zero-click capabilities.
• 🚫 She noted that zero-click means no warning or user interaction is needed, making it a powerful tool for suppression.
• ⚖️ The Biden administration's blacklisting of NSO Group was a significant move, impacting their IPO plans and sending a message to other governments.