Researchers at Citizen Lab, a team that investigates surveillance technology, and Lookout Inc. claim that a little-known Israeli startup
exploited unknown flaws in iOS to help foreign governments spy on their citizens.
As The Wall Street Journal points out, the surveillance software in question came from NSO Group Technologies Ltd. which is known to sell to governments. Researchers first became aware of the software earlier this month through a link sent to a human-rights activist in the United Arab Emirates.
The software, dubbed Pegasus, reportedly takes advantage of three flaws in iOS. Once installed, it acts as a surveillance device and can log messages, track movement and siphon personal data.
Apple on Thursday said it was made aware of the vulnerabilities and fixed them immediately, issuing an emergency patch (version 9.3.5).
Lookout VP of Security Research Mike Murray told the Journal that this is the most professional piece of spyware he has ever seen, adding that it operates in a way as to not attract suspicion. By that, he means that it doesn't drain a device's battery quickly and only transmits larger loads of data when on Wi-Fi.