These targeted attacks were conducted between 2020 and 2023.

Some targeted individuals approached The Citizen Lab when they received security notifications from Apple.

Some of their devices were forensically examined to confirm the Pegasus attacks.

a person using iphone with the home screen open

Source: The Citizen Lab

Five of the seven individuals were targeted and infected, meaning the Pegasus operator had access to their information.

The other two were also targeted, but the devices were not infected.

The investigation report also suggests that a single Pegasus user in the EU conducted at least five attacks.

graphics from The Citizen Lab explaining the use of Apple IDs for Pegasus attack

Source: The Citizen Lab

A total of 4 Apple IDs were used by the operators behind the five attacks.

Access Now and The Citizen Lab arrived at this conclusion after finding identical Apple IDs on the targeted devices.

These Apple IDs were recorded when the Pegasus spyware attempted to exploit HomeKit bugs on iPhones.

spot_img

The report from The Citizen Lab has not suggested who could be behind these Pegasus attacks.

However, in its report, Access Now has offered some insights.

It adds that Belarus, Russia, and Lithuania do not use Pegasus.

Even though Poland used Pegasus, it has not since 2021.

While Latvia uses Pegasus, it is not known for targeting individuals outside its borders.

Both reports have made one concern clear.

source: www.techworm.net