Dan Guido

In absolute awe that NSO would send an iOS jailbreak via SMS to an already paranoid target. The target simply forwarded the URL to a friend.

NSO used shared infrastructure to launch the attack, some of which had other domains with WHOIS info that revealed them as true owners.

“We’re a complete ghost” -NSO co-founder Omri Lavie Except for domains w/ real WHOIS, sending SMS, and strings in malware, sure.

Apple has a unique capability to respond to these issues. They can patch and users apply it. Discovery means the technique dies immediately.

Scary thought: If this works via clicking a link, it also works when injected into a browser session. Use a VPN! https://github.com/trailofbits/algo …

Reports from Citizen Lab and Lookout are both out now: Citizen Lab: https://citizenlab.org/2016/08/million-dollar-dissident-iphone-zero-day-nso-group-uae/ … Lookout: https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegasus-technical-analysis.pdf …

As usual, neither report contains *any* detailed analysis of the exploits, only the malware payload. The skills to do so are too uncommon.