CISA warns about the increasing use of commercial spyware targeting mobile messaging app users through sophisticated exploits. Threat actors are leveraging zero-day and zero-click vulnerabilities to deliver malicious payloads, especially targeting high-value individuals. #NSOGroup #Landfall
Keypoints
- The cybersecurity agency CISA issued a warning about commercial spyware targeting messaging apps like WhatsApp and Signal.
- Threat actors use social engineering, zero-day, and zero-click exploits to deliver spyware to targeted devices.
- Attacks have been reported against Apple and Samsung devices, including spyware like Landfall.
- Russian threat actors exploited Signal’s ‘linked devices’ feature for real-time surveillance.
- High-value individuals and civil society organizations are primary targets of these spyware campaigns.
Read More: https://www.securityweek.com/cisa-warns-of-spyware-targeting-messaging-app-users/