Pegasus spyware-maker NSO Group hacked iPhones of Al Jazeera journalists

In a damning report, researchers from Canada-based Citizen Lab have revealed that the Pegasus spyware, developed by Israel-based NSO Group, compromised the iPhones of dozens of journalists. In July and August this year, government operatives used NSO Group’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera.
 | 
Pegasus spyware-maker NSO Group hacked iPhones of Al Jazeera journalists

In a damning report, researchers from Canada-based Citizen Lab have revealed that the Pegasus spyware, developed by Israel-based NSO Group, compromised the iPhones of dozens of journalists. In July and August this year, government operatives used NSO Group’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. The personal phone of a journalist at London-based Al Araby TV was also hacked, said researchers in a report that came out on Sunday.

The phones were compromised using an exploit chain that we call KISMET, which appears to involve an invisible zero-click exploit in iMessage” in iPhones. In July 2020, KISMET was a zero-day against at least iOS 13.5.1 and could hack Apple’s then-latest iPhone 11.

Based on logs from compromised phones, we believe that NSO Group customers also successfully deployed KISMET or a related zero-click, zero-day exploit between October and December 2019,” said the researchers from the Citizen Lab, which is an interdisciplinary laboratory based at the Munk School of Global Affairs & Public Policy, University of Toronto.

The NSO Group is currently embroiled in a legal battle with Facebook, which last year accused that the Israeli spyware maker used Pegasus in WhatsApp to infect some 1,400 people, mostly celebrities. Facebook has submitted detailed proof in the court about the Israeli company and the alleged hacking into at least 1,400 WhatsApp users last year via its controversial surveillance software Pegasus.

The new Citizen Lab report further stated that the 36 journalists were hacked by four Pegasus operators, “including one operator MONARCHY that we attribute to Saudi Arabia, and one operator SNEAKY KESTREL that we attribute to the United Arab Emirates.

We do not believe that KISMET works against iOS 14 and above, which includes new security protections. All iOS device owners should immediately update to the latest version of the operating system.