New Delhi, February 7: Google has said that government hackers last year used three undiscovered flaws in Apple's iPhone operating system to target users with spyware created by a European startup. Google's Threat Analysis Group (TAG), which investigates nation-backed hacking, published a report on Tuesday analysing several government campaigns using hacking tools developed by several spyware and exploit sellers, including a Spain-based startup called Variston.
Google reported that in a particular campaign, hackers working for the government exploited three iPhone vulnerabilities known as "zero-days," which were not previously known to Apple. The hacking tools used in the attack were developed by Variston, a startup that specialises in surveillance and hacking technology. Microsoft Will Help India Become Self-Reliant by Fostering Skilled AI Workforce and Empowering Every Sector and Industry To Transform With Artificial Intelligence: CEO Satya Nadella.
Google has already analysed Variston's malware twice, once in 2022 and again in 2023. The tech giant said that it identified a previously unknown customer of Variston using zero-day exploits to target iPhones in Indonesia in March 2023. The attackers employed a technique of sending a malicious link via SMS text message to infect the target's phone with spyware. Afterwards, the victim was redirected to a news article published by the Indonesian newspaper, Pikiran Rakyat.
It is unclear who Variston sold its spyware to. Variston, according to Google, works "with several other organisations to develop and deliver spyware." Moreover, Google also mentioned in the report that their researchers are tracking approximately 40 companies that sell surveillance software and exploits to government clients across the globe. Mobile Phone Manufacturing Increased to Estimated 'Rs 3,50,000 Crore' in 2022–23, Up '1,700%' in 10 Years and Exports Up '5,600%': MoS IT Rajeev Chandrasekhar.
The report highlighted a few relatively new companies, including Variston, Cy4Gate, RCS Lab and Negg. In its report, Google stated that it is committed to preventing hacking activities using these companies' capabilities, which have been linked to targeted monitoring of journalists, dissidents, and politicians.
(The above story first appeared on LatestLY on Feb 07, 2024 04:57 PM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).