Pegasus Issue | What are zero-click attacks and how do they infect smartphones?
The HinduAccording to an investigative report by a consortium of media outlets, thousands of activists, journalists and political leaders across the world were targeted by clients of an Israeli spyware maker NSO Group. At the heart of the hack is a powerful spyware called Pegasus, which uses zero day vulnerability in the operating systems to enter into a targeted individual’s phone. Pegasus has evolved from using spear-phishing, a process where an attacker tricks the target to click on a malicious link sent via text message or email, to a more sophisticated method of attack called zero-click attacks. “Pegasus can do more than what the owner of the device can do.” NSO Group found three zero-day vulnerabilities in iOS, which allowed them entry into the system, cybersecurity firm Incognito Security explained. To stay safe, users must ensure that the software and apps in the device are updated, and that any app in use is directly installed from Google Play Store or Apple’s App Store.