A spyware is a malevolent software specially designed to surreptitiously monitor and report the actions of a computer user. It collects data and forwards it to an unknown third-party without the user’s consent. Among many different spywares, the Pegasus spyware is perhaps the most powerful. This spyware’s main motive is to infiltrate smartphones and convert them into heavy surveillance devices. It became the talk of the hour in July 2021 when it targeted more than 50000 phones (Android and iOS) worldwide, including 300 in India.
Who developed Pegasus spyware?
An Israeli software company named NSO group developed the Pegasus spyware. Their primary intention was to use this spyware to track terrorists and criminals. It was supposed to be more of a targeted practice rather than a vigilance on common citizens. According to the claims made by the manufacturer, it only sells the spyware to governments. In fact, ownership of this spyware needs proper license that can cost up to INR 70 lakh. As per the 2016 reports, NSO fixed a high price of $650000 to infiltrate 10 devices along with an installation fee of $500000.
How does the spyware work?
The spyware takes advantage of a device’s vulnerabilities, installs undiscovered bugs or holes in the software of the targeted device to take over it completely. It means that even if the device has advanced security apps installed, Pegasus will easily enter and breach its privacy. Once the phone gets infected with the spyware, it can gather any and all information stored in the device, including contact lists, personal text messages, online search history and monetary transaction details. It doesn’t even end here. This spyware can also track the user’s location at every second through the activated GPS system. Needless to say, this is the most serious level of privacy invasion there can be.
What’s worse is, initially in 2016, the spyware was made in such a way that the user had to click on an unknown link sent via text or email. This process was called ‘spear-fishing.’ This is why governments often warned commoners not to open any message from an unknown or suspicious sender. However, with technological advancement, Pegasus now no longer needs to lure the user to open a link.
By 2019, Pegasus further developed its surveillance capability by giving a missed call on WhatsApp and instantly removing any record of it. This is how around 1400 phones got affected in India alone, out of which there were government officials, journalists, and activists. However, it was soon redeemed once the news was out in the open.
Brief history of Pegasus attack
In 2016, Pegasus was first detected on the phone of a human rights activist Ahmed Mansoor by the scientists at The Citizen Lab, a Canadian cybersecurity organisation. Two years later, the same lab issued a report stating that Pegasus was being used in 45 other countries without anyone’s knowledge. In 2019, the officials of the biggest chatting network WhatsApp revealed that Pegasus continued with its invasion on journalists and human rights activists in India.
Pegasus in 2021: Why talk about it again?
In July 2021, The Pegasus Project, a global investigative effort by journalists, revealed that the Indian government has been using Pegasus to spy on 300 individuals from among ministers, government authorities, opponent politicians, media personnel, industrialists and activists since 2017. The list even included a Supreme Court judge. However, the ruling government has outrightly denied such allegations in absence of concrete proof.