Join 91mobiles WhatsApp Channel
WhatsApp hasn't mentioned who was behind the cyberattack and illegal snooping.
For those unaware, Pegasus is a spyware tool that belongs to Israel-based NSO Group that goes by with other names like Q Suite and Trident. The spyware is said to be capable of infiltrating both Android and iOS devices and tries to hack into the target's mobile devices, including using zero-day exploits. As for WhatsApp, Pegasus is said to have used a vulnerability in the WhatsApp VoIP stack that is used to place video and audio calls. A missed call on WhatsApp allowed Pegasus to gain access to the target device.
According to Citizen Lab, Pegasus is said to have used other ways to enter a target's device, including triggering the target to click on the link using social engineering or fake package notifications to deploy the spyware. Once Pegasus is installed on a target device, it can contact control servers and then relay commands to gather data from the infected device. It can steal information like passwords, contacts, text messages, voice calls, calendar details, and more. It can also spy using the phone's camera, microphone and use GPS to track location.
Also read: WhatsApp banned over 2 million accounts in India in just 30 days, mostly for spamming users
"We sent a special WhatsApp message to approximately 1,400 users that we have reason to believe were impacted by [May 2019] attack to directly inform them about what happened," said WhatsApp in a blog post. However, the company hasn't mentioned who was behind the cyber-attack and illegal snooping. NSO Group had also denied the reports and claims that it only sells the spyware to "vetted and legitimate government agencies."
As many as 40 prominent names from Indian media have cropped up on the WhatsApp-Pegasus hack list, including: