Nine State Department Phones Hijacked by Spyware
Nine US State Department officials had their iPhones remotely hacked by spyware from controversial firm NSO Group, according to reports.
Four people familiar with the matter told Reuters that the Israel developer’s Pegasus malware was used to snoop on the US government victims over the past few months. Although the identity of the hacker(s) is unknown, the targeted staffers were either based in Uganda or working on projects concerning the African country.
They were apparently notified by Apple as part of a wider effort to contact global customers whose devices had been compromised by the NSO-developed “ForcedEntry” exploit. It enabled attackers to remotely hijack smartphones and install Pegasus without any need for user interaction. Apple is also suing NSO Group in a bid to hold it accountable for the actions of some unscrupulous clients.
NSO Group said in a statement that it “shut down all the customers potentially relevant to this case,” while it investigates further.
It appears that the individuals were able to be compromised in this incident because they were using phones not registered in the US.
“We emphasize that the Pegasus software is installed based on phone numbers only, and the