iVerify’s new Mobile Threat Hunting tool, launched in May, has uncovered seven infections of the notorious Pegasus spyware in its first 2,500 scans. The discovery underscores the growing accessibility of spyware detection and highlights the escalating threat posed by commercial spyware, particularly the Pegasus malware, which has gained notoriety for targeting individuals in sensitive positions across various sectors.
The Mobile Threat Hunting tool is designed to help both individuals and organizations detect spyware on their iOS and Android devices. Combining malware signature detection, machine learning, and heuristics, the tool aims to identify the early signs of spyware infection. Available to paying customers, the tool also offers a free version to users who download the iVerify Basics app, which allows for a basic scan once a month. The app generates a diagnostic file that is then analyzed by iVerify, providing users with a simple and accessible way to check for infections.
Although seven infections may appear to be a relatively low number, the fact that they were discovered in a self-selecting customer base indicates that the presence of spyware may be more widespread than previously thought. These infections were found across a variety of high-profile targets, including business leaders, government officials, and other individuals who might not have been considered typical victims of Pegasus spyware, such as political dissidents or journalists.
“The people who were targeted were not just journalists and activists, but business leaders, people running commercial enterprises, and people in government positions,” said Rocky Cole, Chief Operating Officer of iVerify, who is a former NSA analyst.
This revelation broadens the scope of potential victims of Pegasus, showing that the spyware’s reach extends beyond its initial focus on political targets.
Pegasus, developed by the NSO Group, has long been associated with surveillance of political figures and journalists. The spyware is known for its ability to remotely access a victim’s phone, monitor communications, and even activate the device’s microphone and camera. The tool scans for typical signs of infection, including diagnostic data, crash logs, and shutdown logs, which were key in identifying the Pegasus infections uncovered in these initial scans.
Despite the challenges that still exist in refining mobile monitoring tools and reducing false positives, iVerify’s technology has already proven effective at detecting spyware on devices. The tool has uncovered compromises on the devices of activists and political campaign officials, further raising awareness about the risks that mobile device users face in an increasingly connected world.
The NSO Group, the company behind Pegasus, has defended its product by stating that it is sold exclusively to vetted intelligence and law enforcement agencies from the U.S. and its allies, such as Israel. In response to the revelations, NSO Group spokesperson Gil Lainer emphasized the legitimate uses of the spyware for national security purposes.
The success of iVerify’s Mobile Threat Hunting tool highlights a significant shift in the landscape of mobile security. Mobile devices, once considered relatively secure from such sophisticated threats, are now facing increasing risks from commercial spyware. This marks a major evolution in the way both individuals and businesses must think about the security of their mobile devices and personal data.
As the prevalence of spyware continues to rise, tools like iVerify’s Mobile Threat Hunting will play an important role in helping users better protect their devices and personal information from malicious surveillance, ensuring that individuals can maintain control over their digital privacy in an increasingly invasive technological landscape.
