#cytrox — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cytrox, aggregated by home.social.
-
Everyone Is a Target: Targeted Mercenary Spyware & the Rise of Commercial Surveillance
#ParagonGraphite #Pegasus #MementoLabs #PREDATOR #Intellexa #Cytrox #NSOGroup
https://drift0r.substack.com/p/everyone-is-a-target-targeted-mercenary -
Everyone Is a Target: Targeted Mercenary Spyware & the Rise of Commercial Surveillance
#ParagonGraphite #Pegasus #MementoLabs #PREDATOR #Intellexa #Cytrox #NSOGroup
https://drift0r.substack.com/p/everyone-is-a-target-targeted-mercenary -
Everyone Is a Target: Targeted Mercenary Spyware & the Rise of Commercial Surveillance
#ParagonGraphite #Pegasus #MementoLabs #PREDATOR #Intellexa #Cytrox #NSOGroup
https://drift0r.substack.com/p/everyone-is-a-target-targeted-mercenary -
Everyone Is a Target: Targeted Mercenary Spyware & the Rise of Commercial Surveillance
#ParagonGraphite #Pegasus #MementoLabs #PREDATOR #Intellexa #Cytrox #NSOGroup
https://drift0r.substack.com/p/everyone-is-a-target-targeted-mercenary -
Everyone Is a Target: Targeted Mercenary Spyware & the Rise of Commercial Surveillance
#ParagonGraphite #Pegasus #MementoLabs #PREDATOR #Intellexa #Cytrox #NSOGroup
https://drift0r.substack.com/p/everyone-is-a-target-targeted-mercenary -
Predators for Hire: A Global Overview of Commercial Surveillance Vendors
#ParagonGraphite #Candiru #Intellexa #Pegasus #Cytrox #Cy4gate #Cellebrite
https://blog.sekoia.io/predators-for-hire-a-global-overview-of-commercial-surveillance-vendors/ -
Predators for Hire: A Global Overview of Commercial Surveillance Vendors
#ParagonGraphite #Candiru #Intellexa #Pegasus #Cytrox #Cy4gate #Cellebrite
https://blog.sekoia.io/predators-for-hire-a-global-overview-of-commercial-surveillance-vendors/ -
Predators for Hire: A Global Overview of Commercial Surveillance Vendors
#ParagonGraphite #Candiru #Intellexa #Pegasus #Cytrox #Cy4gate #Cellebrite
https://blog.sekoia.io/predators-for-hire-a-global-overview-of-commercial-surveillance-vendors/ -
Predators for Hire: A Global Overview of Commercial Surveillance Vendors
#ParagonGraphite #Candiru #Intellexa #Pegasus #Cytrox #Cy4gate #Cellebrite
https://blog.sekoia.io/predators-for-hire-a-global-overview-of-commercial-surveillance-vendors/ -
Predators for Hire: A Global Overview of Commercial Surveillance Vendors
#ParagonGraphite #Candiru #Intellexa #Pegasus #Cytrox #Cy4gate #Cellebrite
https://blog.sekoia.io/predators-for-hire-a-global-overview-of-commercial-surveillance-vendors/ -
#Cybersecurity #Egypt #Spyware #Predator #Cytrox: "- Between May and September 2023, former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s Predator spyware via links sent on SMS and WhatsApp. The targeting took place after Eltantawy publicly stated his plans to run for President in the 2024 Egyptian elections.
- In August and September 2023, Eltantawy’s Vodafone Egypt mobile connection was persistently selected for targeting via network injection; when Eltantawy visited certain websites not using HTTPS, a device installed at the border of Vodafone Egypt’s network automatically redirected him to a malicious website to infect his phone with Cytrox’s Predator spyware.
- During our investigation, we worked with Google’s Threat Analysis Group (TAG) to obtain an iPhone zero-day exploit chain (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993) designed to install Predator on iOS versions through 16.6.1. We also obtained the first stage of the spyware, which has notable similarities to a sample of Cytrox’s Predator spyware we obtained in 2021. We attribute the spyware to Cytrox’s Predator spyware with high confidence.
- Given that Egypt is a known customer of Cytrox’s Predator spyware, and the spyware was delivered via network injection from a device located physically inside Egypt, we attribute the network injection attack to the Egyptian government with high confidence.
- Eltantawy’s phone was additionally infected with Cytrox’s Predator spyware two years prior, in November 2021, via a text message containing a link to a Predator website."
-
#Cybersecurity #Egypt #Spyware #Predator #Cytrox: "- Between May and September 2023, former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s Predator spyware via links sent on SMS and WhatsApp. The targeting took place after Eltantawy publicly stated his plans to run for President in the 2024 Egyptian elections.
- In August and September 2023, Eltantawy’s Vodafone Egypt mobile connection was persistently selected for targeting via network injection; when Eltantawy visited certain websites not using HTTPS, a device installed at the border of Vodafone Egypt’s network automatically redirected him to a malicious website to infect his phone with Cytrox’s Predator spyware.
- During our investigation, we worked with Google’s Threat Analysis Group (TAG) to obtain an iPhone zero-day exploit chain (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993) designed to install Predator on iOS versions through 16.6.1. We also obtained the first stage of the spyware, which has notable similarities to a sample of Cytrox’s Predator spyware we obtained in 2021. We attribute the spyware to Cytrox’s Predator spyware with high confidence.
- Given that Egypt is a known customer of Cytrox’s Predator spyware, and the spyware was delivered via network injection from a device located physically inside Egypt, we attribute the network injection attack to the Egyptian government with high confidence.
- Eltantawy’s phone was additionally infected with Cytrox’s Predator spyware two years prior, in November 2021, via a text message containing a link to a Predator website."
-
#Cybersecurity #Egypt #Spyware #Predator #Cytrox: "- Between May and September 2023, former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s Predator spyware via links sent on SMS and WhatsApp. The targeting took place after Eltantawy publicly stated his plans to run for President in the 2024 Egyptian elections.
- In August and September 2023, Eltantawy’s Vodafone Egypt mobile connection was persistently selected for targeting via network injection; when Eltantawy visited certain websites not using HTTPS, a device installed at the border of Vodafone Egypt’s network automatically redirected him to a malicious website to infect his phone with Cytrox’s Predator spyware.
- During our investigation, we worked with Google’s Threat Analysis Group (TAG) to obtain an iPhone zero-day exploit chain (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993) designed to install Predator on iOS versions through 16.6.1. We also obtained the first stage of the spyware, which has notable similarities to a sample of Cytrox’s Predator spyware we obtained in 2021. We attribute the spyware to Cytrox’s Predator spyware with high confidence.
- Given that Egypt is a known customer of Cytrox’s Predator spyware, and the spyware was delivered via network injection from a device located physically inside Egypt, we attribute the network injection attack to the Egyptian government with high confidence.
- Eltantawy’s phone was additionally infected with Cytrox’s Predator spyware two years prior, in November 2021, via a text message containing a link to a Predator website."
-
#Cybersecurity #Egypt #Spyware #Predator #Cytrox: "- Between May and September 2023, former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s Predator spyware via links sent on SMS and WhatsApp. The targeting took place after Eltantawy publicly stated his plans to run for President in the 2024 Egyptian elections.
- In August and September 2023, Eltantawy’s Vodafone Egypt mobile connection was persistently selected for targeting via network injection; when Eltantawy visited certain websites not using HTTPS, a device installed at the border of Vodafone Egypt’s network automatically redirected him to a malicious website to infect his phone with Cytrox’s Predator spyware.
- During our investigation, we worked with Google’s Threat Analysis Group (TAG) to obtain an iPhone zero-day exploit chain (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993) designed to install Predator on iOS versions through 16.6.1. We also obtained the first stage of the spyware, which has notable similarities to a sample of Cytrox’s Predator spyware we obtained in 2021. We attribute the spyware to Cytrox’s Predator spyware with high confidence.
- Given that Egypt is a known customer of Cytrox’s Predator spyware, and the spyware was delivered via network injection from a device located physically inside Egypt, we attribute the network injection attack to the Egyptian government with high confidence.
- Eltantawy’s phone was additionally infected with Cytrox’s Predator spyware two years prior, in November 2021, via a text message containing a link to a Predator website."
-
#Cybersecurity #Egypt #Spyware #Predator #Cytrox: "- Between May and September 2023, former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s Predator spyware via links sent on SMS and WhatsApp. The targeting took place after Eltantawy publicly stated his plans to run for President in the 2024 Egyptian elections.
- In August and September 2023, Eltantawy’s Vodafone Egypt mobile connection was persistently selected for targeting via network injection; when Eltantawy visited certain websites not using HTTPS, a device installed at the border of Vodafone Egypt’s network automatically redirected him to a malicious website to infect his phone with Cytrox’s Predator spyware.
- During our investigation, we worked with Google’s Threat Analysis Group (TAG) to obtain an iPhone zero-day exploit chain (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993) designed to install Predator on iOS versions through 16.6.1. We also obtained the first stage of the spyware, which has notable similarities to a sample of Cytrox’s Predator spyware we obtained in 2021. We attribute the spyware to Cytrox’s Predator spyware with high confidence.
- Given that Egypt is a known customer of Cytrox’s Predator spyware, and the spyware was delivered via network injection from a device located physically inside Egypt, we attribute the network injection attack to the Egyptian government with high confidence.
- Eltantawy’s phone was additionally infected with Cytrox’s Predator spyware two years prior, in November 2021, via a text message containing a link to a Predator website."
-
US government adds two more #spyware makers to denylist
The U.S. government put #Intellexa and #Cytrox, two European spyware makers, on an economic denylist. The addition of the two companies, based in Greece and Hungary, as well as two related entities in Ireland and North Macedonia, is part of a wider effort from the Biden administration against makers of malware that is sold exclusively to #lawenforcement and intelligence agencies.
https://techcrunch.com/2023/07/18/us-government-adds-two-more-spyware-makers-on-deny-list/ #surveillance #privacy #NSOGroup -
US government adds two more #spyware makers to denylist
The U.S. government put #Intellexa and #Cytrox, two European spyware makers, on an economic denylist. The addition of the two companies, based in Greece and Hungary, as well as two related entities in Ireland and North Macedonia, is part of a wider effort from the Biden administration against makers of malware that is sold exclusively to #lawenforcement and intelligence agencies.
https://techcrunch.com/2023/07/18/us-government-adds-two-more-spyware-makers-on-deny-list/ #surveillance #privacy #NSOGroup -
US government adds two more #spyware makers to denylist
The U.S. government put #Intellexa and #Cytrox, two European spyware makers, on an economic denylist. The addition of the two companies, based in Greece and Hungary, as well as two related entities in Ireland and North Macedonia, is part of a wider effort from the Biden administration against makers of malware that is sold exclusively to #lawenforcement and intelligence agencies.
https://techcrunch.com/2023/07/18/us-government-adds-two-more-spyware-makers-on-deny-list/ #surveillance #privacy #NSOGroup -
US government adds two more #spyware makers to denylist
The U.S. government put #Intellexa and #Cytrox, two European spyware makers, on an economic denylist. The addition of the two companies, based in Greece and Hungary, as well as two related entities in Ireland and North Macedonia, is part of a wider effort from the Biden administration against makers of malware that is sold exclusively to #lawenforcement and intelligence agencies.
https://techcrunch.com/2023/07/18/us-government-adds-two-more-spyware-makers-on-deny-list/ #surveillance #privacy #NSOGroup -
US government adds two more #spyware makers to denylist
The U.S. government put #Intellexa and #Cytrox, two European spyware makers, on an economic denylist. The addition of the two companies, based in Greece and Hungary, as well as two related entities in Ireland and North Macedonia, is part of a wider effort from the Biden administration against makers of malware that is sold exclusively to #lawenforcement and intelligence agencies.
https://techcrunch.com/2023/07/18/us-government-adds-two-more-spyware-makers-on-deny-list/ #surveillance #privacy #NSOGroup -
BREAKING: US adds 2 European mercenary spyware firms to export control list.
#Cytrox & #Intellexa = *notorious* proliferators of #Predator spyware,
Linked to abuses around globe, Greek #spywaregate, hacking of Americans...🧵1/
Rule: https://public-inspection.federalregister.gov/2023-15343.pdf
-
BREAKING: US adds 2 European mercenary spyware firms to export control list.
#Cytrox & #Intellexa = *notorious* proliferators of #Predator spyware,
Linked to abuses around globe, Greek #spywaregate, hacking of Americans...🧵1/
Rule: https://public-inspection.federalregister.gov/2023-15343.pdf
-
BREAKING: US adds 2 European mercenary spyware firms to export control list.
#Cytrox & #Intellexa = *notorious* proliferators of #Predator spyware,
Linked to abuses around globe, Greek #spywaregate, hacking of Americans...🧵1/
Rule: https://public-inspection.federalregister.gov/2023-15343.pdf
-
BREAKING: US adds 2 European mercenary spyware firms to export control list.
#Cytrox & #Intellexa = *notorious* proliferators of #Predator spyware,
Linked to abuses around globe, Greek #spywaregate, hacking of Americans...🧵1/
Rule: https://public-inspection.federalregister.gov/2023-15343.pdf
-
BREAKING: US adds 2 European mercenary spyware firms to export control list.
#Cytrox & #Intellexa = *notorious* proliferators of #Predator spyware,
Linked to abuses around globe, Greek #spywaregate, hacking of Americans...🧵1/
Rule: https://public-inspection.federalregister.gov/2023-15343.pdf
-
Yet Another Former Israeli Intelligence Officer Linked To Yet Another Shady Company Offering Hacking Tools
https://www.techdirt.com/2023/02/27/yet-another-former-israeli-intelligence-officer-linked-to-yet-another-shady-company-offering-hacking-tools/
#surveillance #nsogroup #talhanan #candiru #malware #spyware #cytrox #israel #1 -
Yet Another Former Israeli Intelligence Officer Linked To Yet Another Shady Company Offering Hacking Tools
https://www.techdirt.com/2023/02/27/yet-another-former-israeli-intelligence-officer-linked-to-yet-another-shady-company-offering-hacking-tools/
#surveillance #nsogroup #talhanan #candiru #malware #spyware #cytrox #israel #1 -
The other one was that Intellexa, a spyware vendor operating from Greece and Cyprus, was tracked down delivering surveillance and spyware equipment from the EU to Sudan. The recipient, a militia led by Sudan's richest man, who was once a leader in the genocidal paramilitary group Janjaweed.
https://www.lighthousereports.nl/investigation/flight-of-the-predator/
The only good part of this story was that it unraveled because one of the Intellexa engineers posted a selfie from the plane.
https://www.lighthousereports.nl/investigation/flight-of-the-predator/
BTW, earlier this year @citizenlab showed that Intellexa was the company behind spyware that was used against a Greek journalist, most likely by the Greek government.
#journalism #spyware #EuropeanUnion #Europe #Sudan #Dafur #Janjaweed #Intellexa #Cytrox
-
Πρόσφατη έρευνα επιβεβαιώνει 378 domains που φιλοξενούν το #Predator τα οποία οδηγούν σε 4 μοναδικά IP. Τα 2 από αυτά εδράζουν στη Β.Μακεδονία, έδρα της #Cytrox . Από τους 4 servers μόνο ο 99.83.154.118 είναι σε "μαύρη λίστα".
https://circleid.com/posts/20220712-predator-surveillance-software-may-not-be-lawful-at-all?mc=socialmedia -
Πρόσφατη έρευνα επιβεβαιώνει 378 domains που φιλοξενούν το #Predator τα οποία οδηγούν σε 4 μοναδικά IP. Τα 2 από αυτά εδράζουν στη Β.Μακεδονία, έδρα της #Cytrox . Από τους 4 servers μόνο ο 99.83.154.118 είναι σε "μαύρη λίστα".
https://circleid.com/posts/20220712-predator-surveillance-software-may-not-be-lawful-at-all?mc=socialmedia -
CW: Ich nutze meine Tröte und Twitter,daher bin ich nicht immer an meiner Tröte oder Twitter
Griechenland: Wie der #Geheimdienst Journalisten überwachte. Auf dem Telefon eines Journalisten wurde der #Staatstrojaner #Predator von #Cytrox gefunden. Wer ist dafür verantwortlich? https://www.dw.com/de/h%C3%B6rt-griechenlands-regierung-journalisten-ab/a-61929783
🐦🔗: https://twitter.com/chaosupdates/status/1529603116030562304
-
#Google's Threat Analysis Group (TAG) lookout for threats & #vulnerabilities across devices & #software that can be exploited by #cybercriminals.
#TAG in its latest blog post has highlighted a spyware dubbed as #Predator, which was installed by state-backed attackers in three separate campaigns by exploiting 5 #0days.
Google (TAG) has claimed that Predator is relatively new #spyware, created by the #surveillance company #Cytrox, which is based in #Skopje, North Macedonia 🇲🇰.
-
❗Το @[email protected] ανάρτησε την είδηση για τη νέα έκθεση της @[email protected], σύμφωνα με την οποία φορείς που «υποστηρίζονται από κυβέρνηση» & «εντοπίζονται στην 🇬🇷» αγόρασαν λογισμικό υποκλοπών από την εταιρεία παρακολουθήσεων #Cytrox.
❌ Ωστόσο, το δημοσίευμα γρήγορα αποσύρθηκε.
🐦🔗: https://twitter.com/reporters_gr/status/1527983464133312514