Pegasus malware has been a concern of security researchers because of its rapid spread at alarming rates throughout the world. Malware has been active since at least 2016 when it was found to infect Android and iPhone devices. According to research conducted by Citizen Lab, the malware has now spread to at least 45 countries, as follows:
Algeria, Bahrain, Bangladesh, Brazil, Canada, Ivory Coast, Egypt, France, Greece, India, Iraq, Israel, Jordan, Kazakhstan, Kenya, Kuwait, Kyrgyzstan, Latvia, Lebanon, Libya, Mexico, Morocco, Netherlands, Oman, Pakistan , Palestine, Poland, Qatar, Rwanda, Saudi Arabia, Singapore, South Africa, Switzerland, Tajikistan, Thailand, Togo, Tunisia, Turkey, UAE, Uganda, United Kingdom, United States, Uzbekistan, Yemen and Zambia.
The problem here is that Pegasus is not an ordinary type of malware, because Citizen Lab researchers have linked it to potential human rights violations. According to Citizen Lab:
Our findings illustrate a grim picture of human rights risk … At least six countries with significant Pegasus operations have previously been linked to abuse of spyware to target civil society … Pegasus also seems to be used by countries with dubious humans. records of rights and history of abusive behavior by state security services. In addition, we have found indications of possible political themes in targeting material in several countries, raising doubts about whether the technology is being used as part of “legitimate” criminal investigations.
All signs in the Pegasus malware point back to the NSO group based in Israel.
Pegasus Malware is a modular threat developed by an Israeli business called NSO Group, which is known for creating threats and placing them for sale on the Dark Web. The Pegasus Malware attack uses three vulnerabilities that have not been patched on iOS to enter the device and install monitoring applications. Pegasus malware also attacks Android devices. By using Pegasus Malware, attackers can register pressed keys, listen to calls, read email and message users, take screenshots, collect user contact lists and browser habits and more. Pegasus Malware is so powerful that it can even collect user messages even before encrypting them or reading them after encryption because they have a keylogger feature.