Close Menu
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

What's On

GM’s Cruise Cars Are Back on the Road in Three US States—But Not for Ride-Hailing

4 July 2025

Chinese Sales of Foreign Phone Makers, Including Apple’s iPhone, Drop 9.7 Percent in May

4 July 2025

iQOO 13 Green Colour Variant Launched in India: Check Price, Availability

4 July 2025
Facebook X (Twitter) Instagram
Just In
  • GM’s Cruise Cars Are Back on the Road in Three US States—But Not for Ride-Hailing
  • Chinese Sales of Foreign Phone Makers, Including Apple’s iPhone, Drop 9.7 Percent in May
  • iQOO 13 Green Colour Variant Launched in India: Check Price, Availability
  • This Is Why Tesla’s Robotaxi Launch Needed Human Babysitters
  • Vivo X Fold 5, Vivo X200 FE Price in India Leaked Ahead of Debut on July 14
  • The EU Proposes New Rules to Govern the European Space Race
  • Android 16’s Live Updates to Show Active Navigation, Ongoing Phone Calls, and More on Lock Screen
  • Google Pixel 6a Owners Eligible for $100 Cash or $150 Store Credit Under Battery Performance Programme
Facebook X (Twitter) Instagram Pinterest Vimeo
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release
Subscribe
Best in TechnologyBest in Technology
Home » A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections
News

A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections

News RoomBy News Room4 December 20244 Mins Read
Share Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
Share
Facebook Twitter LinkedIn Pinterest Email

In recent years, commercial spyware has been deployed by more actors against a wider range of victims, but the prevailing narrative has still been that the malware is used in targeted attacks against an extremely small number of people. At the same time, though, it has been difficult to check devices for infection, leading individuals to navigate an ad hoc array of academic institutions and NGOs that have been on the front lines of developing forensic techniques to detect mobile spyware. On Tuesday, the mobile device security firm iVerify is publishing findings from a spyware detection feature it launched in May. Of 2,500 device scans that the company’s customers elected to submit for inspection, seven revealed infections by the notorious NSO Group malware known as Pegasus.

The company’s Mobile Threat Hunting feature uses a combination of malware signature-based detection, heuristics, and machine learning to look for anomalies in iOS and Android device activity or telltale signs of spyware infection. For paying iVerify customers, the tool regularly checks devices for potential compromise. But the company also offers a free version of the feature for anyone who downloads the iVerify Basics app for $1. These users can walk through steps to generate and send a special diagnostic utility file to iVerify and receive analysis within hours. Free users can use the tool once a month. iVerify’s infrastructure is built to be privacy-preserving, but to run the Mobile Threat Hunting feature, users must enter an email address so the company has a way to contact them if a scan turns up spyware—as it did in the seven recent Pegasus discoveries.

“The really fascinating thing is that the people who were targeted were not just journalists and activists, but business leaders, people running commercial enterprises, people in government positions,” says Rocky Cole, chief operating officer of iVerify and a former US National Security Agency analyst. “It looks a lot more like the targeting profile of your average piece of malware or your average APT group than it does the narrative that’s been out there that mercenary spyware is being abused to target activists. It is doing that, absolutely, but this cross section of society was surprising to find.”

Seven out of 2,500 scans may sound like a small group, especially in the somewhat self-selecting customer base of iVerify users, whether paying or free, who want to be monitoring their mobile device security at all, much less checking specifically for spyware. But the fact that the tool has already found a handful of infections at all speaks to how widely the use of spyware has proliferated around the world. Having an easy tool for diagnosing spyware compromises may well expand the picture of just how often such malware is being used.

“NSO Group sells its products exclusively to vetted US & Israel-allied intelligence and law enforcement agencies,” NSO Group spokesperson Gil Lainer told WIRED in a statement. “Our customers use these technologies daily.”

iVerify says that it took significant investment to develop the detection tool because mobile operating systems like Android, and particularly iOS, are more locked down than traditional desktop operating systems and don’t allow monitoring software to have kernel access at the heart of the system. Cole says that the crucial insight was to use telemetry taken from as close to the kernel as possible to tune machine learning models for detection. Some spyware, like Pegasus, also has characteristic traits that make it easier to flag. In the seven detections, Mobile Threat Hunting caught Pegasus using diagnostic data, shutdown logs, and crash logs. But the challenge, Cole says, is in refining mobile monitoring tools to reduce false positives.

Developing the detection capability has already been invaluable, though. Cole says that it helped iVerify identify signs of compromise on the smartphone of Gurpatwant Singh Pannun, a lawyer and Sikh political activist who was the target of an alleged, foiled assassination attempt by an Indian government employee in New York City. The Mobile Threat Hunting feature also flagged suspected nation state activity on the mobile devices of two Harris-Walz campaign officials—a senior member of the campaign and an IT department member—during the presidential race.

“The age of assuming that iPhones and Android phones are safe out of the box is over,” Cole says. “The sorts of capabilities to know if your phone has spyware on it were not widespread. There were technical barriers and it was leaving a lot of people behind. Now you have the ability to know if your phone is infected with commercial spyware. And the rate is much higher than the prevailing narrative.”

Updated at 12:12 pm EST, December 4, 2024, to include a statement from NSO Group.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleFace ID could get a big upgrade on the iPhone 17. Here’s what might change
Next Article This IMAX Enhanced setup creates a more cinematic experience at home for the holidays

Related Articles

News

GM’s Cruise Cars Are Back on the Road in Three US States—But Not for Ride-Hailing

4 July 2025
News

This Is Why Tesla’s Robotaxi Launch Needed Human Babysitters

4 July 2025
News

The EU Proposes New Rules to Govern the European Space Race

4 July 2025
News

The Person in Charge of Testing Tech for US Spies Has Resigned

4 July 2025
News

Trump’s Defiance of TikTok Ban Prompted Immunity Promises to 10 Tech Companies

4 July 2025
News

The 61 Best Early Amazon Prime Day Deals

3 July 2025
Demo
Top Articles

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024101 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views

Oppo Reno 14, Reno 14 Pro India Launch Timeline and Colourways Leaked

27 May 202581 Views

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Latest News
News

The EU Proposes New Rules to Govern the European Space Race

News Room4 July 2025
Phones

Android 16’s Live Updates to Show Active Navigation, Ongoing Phone Calls, and More on Lock Screen

News Room4 July 2025
Phones

Google Pixel 6a Owners Eligible for $100 Cash or $150 Store Credit Under Battery Performance Programme

News Room4 July 2025
Most Popular

The Spectacular Burnout of a Solar Panel Salesman

13 January 2025124 Views

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024101 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views
Our Picks

This Is Why Tesla’s Robotaxi Launch Needed Human Babysitters

4 July 2025

Vivo X Fold 5, Vivo X200 FE Price in India Leaked Ahead of Debut on July 14

4 July 2025

The EU Proposes New Rules to Govern the European Space Race

4 July 2025

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Facebook X (Twitter) Instagram Pinterest
  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact Us
© 2025 Best in Technology. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.