artk
Tue, Jun 25, 2019 7:21 AM
Tue, May 14, 2019 10:10

WhatsApp discovers 'targeted' surveillance attack

media

Hackers were able to remotely install surveillance software on phones and other devices using a major vulnerability in messaging app WhatsApp, it has been confirmed.

Hackers were able to remotely install surveillance software on phones and other devices using a major vulnerability in messaging app WhatsApp, it has been confirmed.

WhatsApp, which is owned by Facebook, said the attack targeted a "select number" of users, and was orchestrated by "an advanced cyber actor".

A fix was rolled out on Friday.

The attack was developed by Israeli security firm NSO Group, according to a report in the Financial Times.

On Monday WhatsApp urged all of its 1.5bn users to update their apps as an added precaution.

The attack was first discovered earlier this month.

How was the security flaw used?

It involved attackers using WhatsApp's voice calling function to ring a target's device. 

Even if the call was not picked up, the surveillance software would be installed, and, the FT reported, the call would often disappear from the device's call log.

WhatsApp told the BBC its security team was the first to identify the flaw, and shared that information with human rights groups, selected security vendors and the US Department of Justice earlier this month.

"The attack has all the hallmarks of a private company reportedly that works with governments to deliver spyware that takes over the functions of mobile phone operating systems,” the company said on Monday in a briefing document note for journalists.

The firm also published an advisory to security specialists, in which it described the flaw as:  

"A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of SRTCP packets sent to a target phone number.”

Who is behind the software?

The NSO Group is an Israeli company that has been referred to in the past as a "cyber arms dealer".

Its flagship software, Pegasus, has the ability to collect intimate data from a target device, including capturing data through the microphone and camera, and gathering location data.

In a statement, the group said: "NSO's technology is licensed to authorized government agencies for the sole purpose of fighting crime and terror.

"The company does not operate the system, and after a rigorous licensing and vetting process, intelligence and law enforcement determine how to use the technology to support their public safety missions. We investigate any credible allegations of misuse and if necessary, we take action, including shutting down the system.

"Under no circumstances would NSO be involved in the operating or identifying of targets of its technology, which is solely operated by intelligence and law enforcement agencies. NSO would not or could not use its technology in its own right to target any person or organization."

Who has been targeted?

WhatsApp said it was too early to know how many users had been affected by the vulnerability, although it added that suspected attacks were highly-targeted.

According to Facebook's latest figures, WhatsApp has around 1.5bn users worldwide.

Amnesty International, which said it had been targeted by tools created by the NSO Group in the past, said this attack was one human rights groups had long feared was possible.

"They're able to infect your phone without you actually taking an action," said Danna Ingleton, deputy programme director for Amnesty Tech. She said there was mounting evidence that the tools were being used by regimes to keep prominent activists and journalists under surveillance.

"There needs to be some accountability for this, it can't just continue to be a wild west, secretive industry."

On Tuesday, a Tel Aviv court will hear a petition led by Amnesty International that calls for  

Israel's Ministry of Defence to revoke the NSO Group's licence to export its products.

newsbangladesh.com/nbd 

Shakib first Tiger to 1k World Cup runs 161,323 drug peddlers sued in 2018: Minister Provide division to ex-Sonagazi OC Moazzem: Court Tigers post 262 runs against Afghanistan Listening To Music May Help Ease Pain For Cancer Patients Tk 2.2 lakh crore loan defaulted in 20yrs: BB 100 companies to hunt graduates at career fair from Thursday Cabinet okays flag vessel draft bill High iron levels may help lower cholesterol Govt dismisses TIB report over promotion Foreign investment grew to 67.94 per cent last year ACC sues DIG Mizan, 3 other relatives 5 cocktails blasted near BNP’s Nayapaltan office Bangladesh asked to bat first after losing toss Iran denies being hit by US cyber attack Submit report on 458,369 unfit buses across Bangladesh: HC Trump to visit S Korea this week for summit with Moon Rail communications with Sylhet to resume by evening: Rail Secy Argentina beats Qatar to escape elimination at Copa America Daimler issues profit warning over diesel issues Future summers will 'smash' temperature records every year Huawei Mate X to launch in September, will run Android: Report 'Toy Story 4' dominates with $118 million debut Coalition: Yemen rebel attack on Saudi airport kills 1, wounds 7 Mexico tops Martinique 3-2 to reach Gold Cup quarterfinals Probe body formed over Kulaura train disaster Bogra 6 by-election underway Blow to Turkey's Erdogan as opposition wins big in Istanbul Police SI arrested with yaba found in his residence First-time minister hits the ground to tackle housing issues