Pegasus strikes again: targeted iPhones, a persistent threat

According to the New York TimesApple recently warned several iPhone users in Russia that they could fall victim to the dreaded spyware infection Pegasus. This malware can access iOS content discreetly without alerting the owner of the device. The targets of this attack appear to be journalists, potentially under surveillance by the Russian government. However, it is difficult to confirm the identity of the sponsor, as NSO Group, the developer of this spyware, does not disclose its customers.

Once installed, Pegasus has the ability to view photos stored on an iPhone and even take remote control of the device. Even more worryingly, this software can read end-to-end encrypted conversations, such as those on WhatsApp. This calls into question the promise of confidentiality made by certain technology companies, notably Meta (formerly Facebook).

Yet the cost of using Pegasus is exorbitant, approaching $20 million, although these figures may have risen due to inflation. This means that those likely to be targeted by this spyware are facing serious and financially solid threats.

NSO Group is tight-lipped about its customers, but it is widely believed that its main buyers are government agencies and law enforcement agencies such as the police and intelligence services. In France, it has even been suggested that the DGSI (Direction Générale de la Sécurité Intérieure) is exploring its own surveillance solution. However, it is important to note that for many years similar devices have been used to read the contents of smartphones belonging to people presumed guilty, often without their consent and even before a judge has established their guilt.

There are a few good practices you can follow to avoid falling victim to spyware on your smartphone. It is essential not to open links from unknown sources, as this was the vector of attack in the case of the hacking of Jeff Bezos's iPhone. In addition, cybersecurity experts recommend not taking your smartphone to sensitive meetings, such as board meetings, legal talks or negotiations. This offers extra protection, because if the microphone can be activated remotely, your absence from the phone makes you less vulnerable.