[](<https://thehackernews.com/images/-lhBvCWMt-sM/W6EQDQJOiDI/AAAAAAAAyJY/LJgN9jqAZsszQ7cMlm4An4EXCc5EXNy3gCLcBGAs/s728-e100/Pegasus-android-ios-hacking-tool.jpg>)
One of the world's most dangerous Android and iPhone spyware program has been found deployed against targets across 45 countries around the world over the last two years, a new report from Citizen Lab revealed.
The infamous spyware, dubbed Pegasus, is developed by NSO Group—an Israeli company which is mostly known for selling high-tech surveillance tools capable of remotely cracking into iPhones and Android devices to intelligence agencies around the world.
Pegasus is NSO Group's most powerful creation that has been designed to hack iPhone, Android, and other mobile devices remotely, allowing an attacker to access an incredible amount of data on a target victim, including text messages, calendar entries, emails, WhatsApp messages, user's location, microphone, and camera—all without the victim's knowledge.
Pegasus has previously been used to target human rights activists and journalists, from [Mexico](<https://thehackernews.com/2017/06/mexican-spyware-malware.html>) to the [United Arab Emirates](<https://thehackernews.com/2016/09/apple-mac-os-x-update.html>).
Just last month, The Hacker News reported that this nasty [spyware was used against](<https://thehackernews.com/2018/07/iphone-hacking-spyware.html>) one of the staffers of Amnesty International—one of the most prominent non-profit human rights organizations in the world—earlier this year, alongside another human rights defender.
[](<https://thehackernews.com/images/-fFt0s6yf0R4/W6EQujhBB7I/AAAAAAAAyJo/61GzdtWwuFAMi1vZmAICyvi0udWOYhEFACLcBGAs/s728-e100/Pegasus-android-ios-hacking-software.jpg>)
Now, a new report [released](<https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/>) Tuesday from the University of Toronto's Citizen Lab revealed that the Pegasus infections have victimized more countries than previously believed.
## 36 Pegasus Spyware Operations Found Deployed in 45 Countries
Citizen Lab last month said that it had so far counted as many as [174 publicly-reported cases](<https://thehackernews.com/2018/07/iphone-hacking-spyware.html>) of individuals worldwide "abusively targeted" with NSO spyware, but now found traces of Pegasus infections across as many as 45 countries.
According to the report, 36 Pegasus operators have been using the spyware to conduct surveillance operations in 45 countries worldwide, and at least 10 of these operators appear to be actively engaged in cross-border surveillance.
**Read More:** [Ex-NSO Employee Caught Selling Pegasus Hacking Tool For $50 Million](<https://thehackernews.com/2018/07/phone-hacking-tools-sale.html>)
The report further said that while some NSO customers may be lawfully using Pegasus, at least 6 of those countries with significant Pegasus operations were "known spyware abusers," which means they have previously been linked to the abusive use of spyware to target civil society.
[](<https://thehackernews.com/images/-PHOT1eilCXA/W6EQbWtG_fI/AAAAAAAAyJg/7OKkYkavuysVxey70T_vaI4G3XEeF94pQCLcBGAs/s728-e100/Pegasus-spyware-android-ios-hacking-tool.jpg>)
These "known spyware abusers" include Bahrain, Kazakhstan, Mexico, Morocco, Saudi Arabia, and the United Arab Emirates.
The list of countries targeted by Pegasus includes Algeria, Bahrain, Bangladesh, Brazil, Canada, Cote d'Ivoire, Egypt, France, Greece, India, Iraq, Israel, Jordan, Kazakhstan, Kenya, Kuwait, Kyrgyzstan, Latvia, Lebanon, Libya, Mexico, Morocco, the Netherlands, Oman, Pakistan, Palestine, Poland, Qatar, Rwanda, Saudi Arabia, Singapore, South Africa, Switzerland, Tajikistan, Thailand, Togo, Tunisia, Turkey, the UAE, Uganda, the United Kingdom, the United States, Uzbekistan, Yemen, and Zambia.
Since Citizen Lab tracked down Pegasus infections by creating fingerprints for Pegasus infrastructure to identify the IP addresses associated with the same spyware system, it admitted that there could be some inaccuracies in its report, due to the possible use of VPN and satellite connections by some of its targets.
Citizen Lab is keeping those fingerprints secret for now but found they could then be detected by scanning the internet.
## Spyware Creator "NSO Group" Response:
In response to the Citizen Lab report, an NSO Group spokesperson released a statement saying that the company worked in full compliance with all countries without breaking any laws, including export control regulations.
"Contrary to statements made by you, our product is licensed to government and law enforcement agencies for the sole purpose of investigating and preventing crime and terror. Our business is conducted in strict compliance with applicable export control laws," NSO Group spokesperson Shalev Hulio told Citizen Lab.
"NSO's Business Ethics Committee, which includes outside experts from various disciplines, including law and foreign relations, reviews and approves each transaction and is authorized to reject agreements or cancel existing agreements where there is a case of improper use."
The NSO Group further said that there were some problems with the Citizen Lab research and that the company did not sell in many of the 45 countries listed in the report.
Found this article interesting? Follow THN on [Facebook](<https://www.facebook.com/thehackernews>), [Twitter __](<https://twitter.com/thehackersnews>) and [LinkedIn](<https://www.linkedin.com/company/thehackernews/>) to read more exclusive content we post.
{"id": "THN:5150FA46B8740566F226E9DBFAEC65CC", "vendorId": null, "type": "thn", "bulletinFamily": "info", "title": "Powerful Android and iOS Spyware Found Deployed in 45 Countries", "description": "[](<https://thehackernews.com/images/-lhBvCWMt-sM/W6EQDQJOiDI/AAAAAAAAyJY/LJgN9jqAZsszQ7cMlm4An4EXCc5EXNy3gCLcBGAs/s728-e100/Pegasus-android-ios-hacking-tool.jpg>)\n\nOne of the world's most dangerous Android and iPhone spyware program has been found deployed against targets across 45 countries around the world over the last two years, a new report from Citizen Lab revealed. \n \nThe infamous spyware, dubbed Pegasus, is developed by NSO Group\u2014an Israeli company which is mostly known for selling high-tech surveillance tools capable of remotely cracking into iPhones and Android devices to intelligence agencies around the world. \n \nPegasus is NSO Group's most powerful creation that has been designed to hack iPhone, Android, and other mobile devices remotely, allowing an attacker to access an incredible amount of data on a target victim, including text messages, calendar entries, emails, WhatsApp messages, user's location, microphone, and camera\u2014all without the victim's knowledge. \n \nPegasus has previously been used to target human rights activists and journalists, from [Mexico](<https://thehackernews.com/2017/06/mexican-spyware-malware.html>) to the [United Arab Emirates](<https://thehackernews.com/2016/09/apple-mac-os-x-update.html>). \n \nJust last month, The Hacker News reported that this nasty [spyware was used against](<https://thehackernews.com/2018/07/iphone-hacking-spyware.html>) one of the staffers of Amnesty International\u2014one of the most prominent non-profit human rights organizations in the world\u2014earlier this year, alongside another human rights defender. \n\n\n[](<https://thehackernews.com/images/-fFt0s6yf0R4/W6EQujhBB7I/AAAAAAAAyJo/61GzdtWwuFAMi1vZmAICyvi0udWOYhEFACLcBGAs/s728-e100/Pegasus-android-ios-hacking-software.jpg>)\n\nNow, a new report [released](<https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/>) Tuesday from the University of Toronto's Citizen Lab revealed that the Pegasus infections have victimized more countries than previously believed. \n \n\n\n## 36 Pegasus Spyware Operations Found Deployed in 45 Countries\n\n \nCitizen Lab last month said that it had so far counted as many as [174 publicly-reported cases](<https://thehackernews.com/2018/07/iphone-hacking-spyware.html>) of individuals worldwide \"abusively targeted\" with NSO spyware, but now found traces of Pegasus infections across as many as 45 countries. \n \nAccording to the report, 36 Pegasus operators have been using the spyware to conduct surveillance operations in 45 countries worldwide, and at least 10 of these operators appear to be actively engaged in cross-border surveillance. \n \n**Read More:** [Ex-NSO Employee Caught Selling Pegasus Hacking Tool For $50 Million](<https://thehackernews.com/2018/07/phone-hacking-tools-sale.html>) \n \nThe report further said that while some NSO customers may be lawfully using Pegasus, at least 6 of those countries with significant Pegasus operations were \"known spyware abusers,\" which means they have previously been linked to the abusive use of spyware to target civil society. \n\n\n[](<https://thehackernews.com/images/-PHOT1eilCXA/W6EQbWtG_fI/AAAAAAAAyJg/7OKkYkavuysVxey70T_vaI4G3XEeF94pQCLcBGAs/s728-e100/Pegasus-spyware-android-ios-hacking-tool.jpg>)\n\nThese \"known spyware abusers\" include Bahrain, Kazakhstan, Mexico, Morocco, Saudi Arabia, and the United Arab Emirates. \n \nThe list of countries targeted by Pegasus includes Algeria, Bahrain, Bangladesh, Brazil, Canada, Cote d'Ivoire, Egypt, France, Greece, India, Iraq, Israel, Jordan, Kazakhstan, Kenya, Kuwait, Kyrgyzstan, Latvia, Lebanon, Libya, Mexico, Morocco, the Netherlands, Oman, Pakistan, Palestine, Poland, Qatar, Rwanda, Saudi Arabia, Singapore, South Africa, Switzerland, Tajikistan, Thailand, Togo, Tunisia, Turkey, the UAE, Uganda, the United Kingdom, the United States, Uzbekistan, Yemen, and Zambia. \n \nSince Citizen Lab tracked down Pegasus infections by creating fingerprints for Pegasus infrastructure to identify the IP addresses associated with the same spyware system, it admitted that there could be some inaccuracies in its report, due to the possible use of VPN and satellite connections by some of its targets. \n \nCitizen Lab is keeping those fingerprints secret for now but found they could then be detected by scanning the internet. \n \n\n\n## Spyware Creator \"NSO Group\" Response:\n\n \nIn response to the Citizen Lab report, an NSO Group spokesperson released a statement saying that the company worked in full compliance with all countries without breaking any laws, including export control regulations. \n \n\"Contrary to statements made by you, our product is licensed to government and law enforcement agencies for the sole purpose of investigating and preventing crime and terror. Our business is conducted in strict compliance with applicable export control laws,\" NSO Group spokesperson Shalev Hulio told Citizen Lab. \n \n\"NSO's Business Ethics Committee, which includes outside experts from various disciplines, including law and foreign relations, reviews and approves each transaction and is authorized to reject agreements or cancel existing agreements where there is a case of improper use.\" \n \nThe NSO Group further said that there were some problems with the Citizen Lab research and that the company did not sell in many of the 45 countries listed in the report. \n\n\nFound this article interesting? Follow THN on [Facebook](<https://www.facebook.com/thehackernews>), [Twitter _\uf099_](<https://twitter.com/thehackersnews>) and [LinkedIn](<https://www.linkedin.com/company/thehackernews/>) to read more exclusive content we post.\n", "published": "2018-09-18T15:05:00", "modified": "2018-09-18T15:05:55", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://thehackernews.com/2018/09/android-ios-hacking-tool.html", "reporter": "The Hacker News", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2022-05-09T12:40:51", "viewCount": 1060, "enchantments": {"score": {"value": 0.3, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.3}, "_state": {"dependencies": 1659855310, "score": 1659805755, "epss": 1678865708}, "_internal": {"score_hash": "fcc3cb02613c13a51e68ae8d69145921"}}
Powerful Android and iOS Spyware Found Deployed in 45 Countries