In July and August this year,
The personal phone of a journalist at London-based Al Araby TV was also hacked, said researchers in a report that came out on Sunday.
"The phones were compromised using an
In July 2020, KISMET was a zero-day against at
"Based on logs from compromised phones, we believe that NSO Group customers also successfully deployed KISMET or a related zero-click, zero-day exploit between October and December 2019," said the researchers from the Citizen Lab, which is an interdisciplinary laboratory based at the Munk School of Global Affairs & Public Policy, University of Toronto.
Facebook has submitted detailed proof in the court about the Israeli company and the allegedly hacking into at least 1,400 WhatsApp users last year via its controversial surveillance software Pegasus.
The new Citizen Lab report further stated that the 36 journalists were hacked by four Pegasus operators, "including one operator MONARCHY that we attribute to Saudi Arabia, and one operator SNEAKY KESTREL that we attribute to the United Arab Emirates".
"We do not believe that KISMET works against iOS 14 and above, which includes new security protections. All iOS device owners should immediately update to the latest version of the operating system".
Given the global reach of NSO Group's customer base and the apparent vulnerability of almost all iPhone devices prior to the iOS 14 update, the researchers suspect that the infections were a miniscule fraction of the total attacks leveraging this exploit.
Infrastructure used in these attacks included servers in Germany, France, UK, and Italy using cloud providers Aruba, Choopa, CloudSigma, and DigitalOcean.
The researchers have shared the findings with Apple and the company was looking into the issue.
NSO said in a statement to
"This is the first we are hearing of these assertions. As we have repeatedly stated, we do not have access to any information related to the identities of individuals upon whom our system is alleged to have been used to conduct surveillances," a NSO spokesperson was quoted and saying.
Counting the 36 cases revealed in the new report, there are now at least 50 publicly known cases of journalists and others in media targeted with NSO spyware, with attacks observed as recently as August 2020.
SEE ALSO:
Antony Waste Handling Cell ₹300-crore IPO opens today — these are the risks and opportunities
The founder of SUGAR cosmetics explains how the startup clocked a 60% growth in sales during the pandemic