Amazon launches NSO Group activity from cloud service after spying on reports

The NSO Group states that it monitors customers for spyware abuse.

Getty Images

Amazon has deactivated the cloud computing account that researchers associated with the NSO group. The NSO Group is reported to have used Amazon Web Services as part of a spyware system to monitor calls by the government. Delete Amnesty International Forensic InvestigatorDiscovered the Israeli company’s Pegasus software on the phone of activists and journalists, and sometimes operated it using AWS systems.

Citizen Lab forensic researchers analyzing spyware at the University of Toronto independently confirmed Amnesty International’s findings The hacking tool was working on AWS CloudFront, a content delivery network product. Amazon told researchers in May that it had swiftly acted to remove hacking activity from the system, according to an Amnesty International report.

Pegasus spyware You can access and record the textAccording to a New York Times report, passive recording and scraping of passwords on videos, photos, web activity, and devices. This software is designed to work on iPhone and some Android phones.

In the statement, Amazon repeated what it said to Amnesty International. “When we learned of this activity, we acted swiftly to shut down the relevant infrastructure and accounts,” the company said.

News of the removal of NSO Group activity from AWS was previously reported Deputy..

An out-of-focus iPhone is placed in front of the NSO Group headquarters, with the company logo on the side of the building.

Mobile phones outside the NSO Group headquarters. The company says it will investigate reported software abuses.

Getty Images

A spokesman for the NSO Group said in a statement, “The claim is false.” The company then clarified the statement, stating that it referred to AWS’s allegations that it had deleted the account.

In response, an Amazon spokeswoman said, “We have shut down the infrastructure referenced in this report that has been identified as supporting the reported hacking activities, in accordance with our Terms of Service.” Stated.

NSO Group Told the Washington Post It will investigate recent findings that the product was used to spy on activists and journalists. Amnesty International’s findings show that the company’s Pegasus spyware was found on dozens of phones received for review. Some phones showed signs of repeated spyware breaches.

Researchers have discovered that the Pegasus software was installed on the target phone in a variety of ways. Phone owners may visit popular websites, but are secretly redirected to another site that automatically downloads spyware. To perform the redirect, the hacking organization must use a machine that mimics a mobile phone tower or a device installed on the target’s Internet service provider to intercept web traffic destined for the target’s device. Concluded.

Some targeted devices were infected when they received a text message containing a “zero-click” attack. This means that device owners do not have to click on malicious links to cause an infection.The reported attack occurred via iMessage, a method previously reported by Citizen Lab. Hack the phone of a journalist in Al Jazeera.. (The NSO Group denied the report’s allegations.)

Amazon’s decision to end support for hacking activities takes place in the same year that AWS deleted the account. Belongs to the social media service Parler, A place posted by a right-wing extremist. Amazon said parlor failed to moderate Posts from users who posted racist and sexist slurs, and calls for violence against lawmakers, Amazon facilities, and Amazon founder Jeff Bezos. Parlor sued Amazon twice on the move. Amazon claims to have defamed the company By removing support for the parlor, he favored another customer, Twitter.

Amazon removal is A group of revealed news sites Wide range NSO Group Business DetailsAnalyzes a list of 50,000 phone numbers obtained by journalists. The phones analyzed by Amnesty International were on the list of numbers, indicating that they were infected with Pegasus or that someone was trying to install Pegasus.There were two women among the reported targets Close to Jamal Khashoggi, a murdered Saudi journalistAccording to the Washington Post, there are also journalists and activists from countries such as India, Azerbaijan and Rwanda, according to Amnesty International.

The reported Hacking received criticism from privacy advocates, including Edward Snowden, who whistled the National Security Agency’s espionage in 2013.

“If we don’t do anything to stop selling this technology, we’re not just targeting 50,000 people,” Snowden said. Parents.. That would be a goal of 50 million, and it would happen much faster than any of us would expect. “

The NSO Group questioned the news investigation, denying that the software was involved in the hacking of Khashoggi-related targets. The company claims that its software is not licensed for use on 50,000 phones. Of the thousands of phone numbers surveyed, 37 were analyzed. A spokesman for the NSO Group said in these calls, “reporters have not been able to prove the definitive link between the numbers and the NSO.”

The NSO Group is involved in other hacks, including previous reports and proceedings. Amazon founder Jeff Bezos hacked reported Saudi dissidents sued the company in 2018 on suspicion of its role in device hacking Belonging to journalist KhashoggiThat year, he was killed at the Saudi Embassy in Turkey.

Amazon launches NSO Group activity from cloud service after spying on reports

Source link Amazon launches NSO Group activity from cloud service after spying on reports

Back to top button