Google says attackers worked with ISPs to deploy Hermit spyware on Android and iOS
by Emma Roth from The Verge - All Posts on (#60RX7)
Illustration by Alex Castro / The Verge A sophisticated spyware campaign is getting the help of internet service providers (ISPs) to trick users into downloading malicious apps, according to research published by Google's Threat Analysis Group (TAG) (via TechCrunch). This corroborates earlier findings from security research group Lookout, which has linked the spyware, dubbed Hermit, to Italian spyware vendor RCS Labs.
Lookout says RCS Labs is in the same line of work as NSO Group - the infamous surveillance-for-hire company behind the Pegasus spyware - and peddles commercial spyware to various government agencies. Researchers at Lookout believe Hermit has already been deployed by the government of Kazakhstan and Italian authorities. In line with these findings, Google has...