artk
Wed, Sep 18, 2019 4:02 PM
Tue, May 14, 2019 10:10

WhatsApp discovers 'targeted' surveillance attack

media

Hackers were able to remotely install surveillance software on phones and other devices using a major vulnerability in messaging app WhatsApp, it has been confirmed.

Hackers were able to remotely install surveillance software on phones and other devices using a major vulnerability in messaging app WhatsApp, it has been confirmed.

WhatsApp, which is owned by Facebook, said the attack targeted a "select number" of users, and was orchestrated by "an advanced cyber actor".

A fix was rolled out on Friday.

The attack was developed by Israeli security firm NSO Group, according to a report in the Financial Times.

On Monday WhatsApp urged all of its 1.5bn users to update their apps as an added precaution.

The attack was first discovered earlier this month.

How was the security flaw used?

It involved attackers using WhatsApp's voice calling function to ring a target's device. 

Even if the call was not picked up, the surveillance software would be installed, and, the FT reported, the call would often disappear from the device's call log.

WhatsApp told the BBC its security team was the first to identify the flaw, and shared that information with human rights groups, selected security vendors and the US Department of Justice earlier this month.

"The attack has all the hallmarks of a private company reportedly that works with governments to deliver spyware that takes over the functions of mobile phone operating systems,” the company said on Monday in a briefing document note for journalists.

The firm also published an advisory to security specialists, in which it described the flaw as:  

"A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of SRTCP packets sent to a target phone number.”

Who is behind the software?

The NSO Group is an Israeli company that has been referred to in the past as a "cyber arms dealer".

Its flagship software, Pegasus, has the ability to collect intimate data from a target device, including capturing data through the microphone and camera, and gathering location data.

In a statement, the group said: "NSO's technology is licensed to authorized government agencies for the sole purpose of fighting crime and terror.

"The company does not operate the system, and after a rigorous licensing and vetting process, intelligence and law enforcement determine how to use the technology to support their public safety missions. We investigate any credible allegations of misuse and if necessary, we take action, including shutting down the system.

"Under no circumstances would NSO be involved in the operating or identifying of targets of its technology, which is solely operated by intelligence and law enforcement agencies. NSO would not or could not use its technology in its own right to target any person or organization."

Who has been targeted?

WhatsApp said it was too early to know how many users had been affected by the vulnerability, although it added that suspected attacks were highly-targeted.

According to Facebook's latest figures, WhatsApp has around 1.5bn users worldwide.

Amnesty International, which said it had been targeted by tools created by the NSO Group in the past, said this attack was one human rights groups had long feared was possible.

"They're able to infect your phone without you actually taking an action," said Danna Ingleton, deputy programme director for Amnesty Tech. She said there was mounting evidence that the tools were being used by regimes to keep prominent activists and journalists under surveillance.

"There needs to be some accountability for this, it can't just continue to be a wild west, secretive industry."

On Tuesday, a Tel Aviv court will hear a petition led by Amnesty International that calls for  

Israel's Ministry of Defence to revoke the NSO Group's licence to export its products.

newsbangladesh.com/nbd 

Hasina to receive two global awards in New York Rifat murder: Court accepts chargesheet ‘Action against those providing passports to Rohingyas’ 2.14-kg gold seized at Dhaka airport Suu Kyi’s role in Rohingya abuses still unclear: UN Protesters attacked at DU during anti-graft demo Suspected robber killed in Gazipur ‘gunfight’ Activists push US Congress to pass Hong Kong bill 536 new dengue patients hospitalized in 24 hrs Nursing education to be elevated to global standards: PM Mamata Banerjee to meet Modi Wednesday afternoon Iran blames US, Saudi for conflict in region Kashmir issue may not be ‘major topic’ during Modi-Xi meet: China Bangladesh to seek expeditious global efforts to resolve Rohingya crisis Rajshahi mother-son murder: 3 to die, 4 get life Ensure quality services for passengers, asks PM Momen for reducing trade gap with New Zealand Received Tk 25 lakh from JU VC: BCL leader Taj Straighten your hair without damaging them MTB introduces Commercial Space Finance No bar for Fouzia to join as VNSC principal 150 tigers were rescued from a Thai temple, over half are dead PM Hasina inaugurates Biman’s ‘Rajhangsa’ Probe report in BB reserve heist case on Oct 20 Mehjabin files case with cyber crime tribunal ECNEC okays 8 projects involving Tk 8,968.08cr 24 killed in Afghanistan’s president rally blast JU VC to face action, if found involved in irregularity: Quader Man missing while bathing, dead body found in Bagerhat river Child dies of dengue in Dhaka