Mercenary Spyware

Mercenary Spyware

News: Recently, Apple issued alerts to iPhone users in 92 countries, including India, warning them about potential mercenary spyware attacks, specifically mentioning threats like Pegasus.

About Malware and Spyware:
• Malware, short for malicious software encompasses viruses and spyware that are designed to steal personal information, send spam, and commit fraud.
• Criminals use appealing websites, desirable downloads, and compelling stories to lure consumers into clicking links that will 
download malware, especially on computers lacking adequate security software.
• Spyware is a specific type of malware that can monitor or control your computer use.
• It may be used to display pop-up ads, redirect computers to unwanted websites, monitor internet surfing, or record keystrokes, potentially leading to identity theft.

Mercenary Spyware:
o Mercenary spyware is specifically crafted to clandestinely infiltrate and compromise smartphones and other devices, enabling the monitoring of movements, communications, and theft of private data without user knowledge or consent.
o These attacks are sophisticated and meticulously targeted at specific individuals, backed by significant resources, surpassing typical cybercriminal activity and consumer-grade malware.
o Detecting and preventing mercenary spyware is challenging due to substantial investment and its short lifespan.
o Governments, intelligence agencies, and law enforcement bodies reportedly purchase mercenary spyware to target political opponents, activists, engage in corporate espionage, and commit financial fraud.

• Examples of Mercenary Spyware Companies:
o Notable companies producing mercenary spyware include NSO Group, FinFisher, and Hacking Team.
o The NSO Groups flagship spyware, Pegasus, has been procured by various governments to remotely infiltrate devices and access calls, emails, messages, and files.
o FinFishers products, such as FinSpy, can capture keystrokes, access data, and activate microphones and cameras without permission.
o The Hacking Teams Galileo, also known as Remote Control System (RCS), is capable of capturing keystrokes, recording video calls, and accessing cameras and microphones.
• Communication Surveillance in India:
o In India, communication surveillance primarily operates under two laws: the Telegraph Act of 1885 and the Information Technology Act of 2000.
o The Telegraph Act addresses call interception, while the IT Act was enacted to oversee surveillance of all electronic communications following a Supreme Court intervention in 1996.
o A comprehensive data protection law to address gaps in existing surveillance frameworks is yet to be enacted.