BitsnBytes-Winter2024-2025

2 3 4 Bits & bytes Winter 2024-2025 11 Government-grade commercial spyware refers to highly sophisticated surveillance software developed by private companies and sold to governments and other authorized entities. This type of spyware is designed to covertly infiltrate and monitor electronic devices to gather intelligence, track activities, and intercept communications. A well-known spyware used by various governments is Pegasus, created by NSO Group to combat terrorism. Key characteristics include: Standard mobile spyware steals operating system and clipboard data, cryptocurrency wallet information, and account credentials. It can be spread through phishing, malicious email attachments, social media links and fraudulent text messages. Advanced spyware , also known as stalkerware , is more sophisticated and unethical, and commonly found on phones. Unlike basic spyware, stalkerware often includes invasive and persistent features, which make it more dangerous. Key characteristics include: • Data Theft: It can steal detailed personal information, such as financial data, account credentials, emails, and messages. • Location Tracking: It can track devices’ physical locations, compromising users’ privacy and security. • Advanced Capabilities: This spyware includes features such as keylogging, screen capture, microphone and camera activation, GPS tracking, and the ability to intercept and decrypt communications. • Stealth and Persistence: It is designed to operate undetected, often evading detection by antivirus software and other security measures. Once installed, it can remain on devices for extended periods of time while continuously gathering data. • Exploitation of Vulnerabilities: This spyware often exploits zero-day vulnerabilities—undisclosed software flaws that provide backdoor access into systems. • Legal and Ethical Concerns: The use of this spyware raises significant privacy and human rights issues, particularly when governments employ it to monitor journalists, activists, and political opponents. • Surveillance: Advanced spyware can enable unauthorized access to devices’ microphones and cameras, allowing real-time eavesdropping and recording. • Stealth and Persistence: It often operates undetected, using sophisticated methods to hide its presence from standard security measures. It can survive system reboots and attempts to remove it, often requiring specialized tools for complete removal. While government-grade commercial spyware is a powerful tool used for surveillance with legitimate applications in national security, it can also be used against civil liberties. Continued on page 12 (Continued from page 10)