Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OSINT - AmnestyTech/investigations/master/2021-07-18_nso/pegasus.stix2

The provided information pertains to the Pegasus malware, a highly sophisticated spyware developed by the NSO Group, a known surveillance vendor. Pegasus is designed primarily to target iOS devices, enabling remote surveillance by exploiting zero-day vulnerabilities and leveraging advanced infection vectors. The malware can infiltrate devices without user interaction, often through zero-click exploits, making detection and prevention particularly challenging. Once installed, Pegasus can access a wide range of sensitive data including messages, emails, call logs, location data, microphone and camera feeds, and encrypted communications. The malware's capabilities extend to real-time surveillance and data exfiltration, posing significant threats to privacy and security. The reference to AmnestyTech investigations and OSINT (Open Source Intelligence) indicates that this threat has been extensively analyzed in the public domain, with a moderate certainty level (50%) regarding specific technical details. Although no known exploits are currently reported in the wild within this dataset, the high severity classification reflects the potential impact and sophistication of Pegasus. The lack of affected versions suggests that the malware targets vulnerabilities in iOS broadly rather than specific software versions, consistent with its use of zero-day exploits. The threat level and analysis scores indicate a high priority for monitoring and mitigation. Overall, Pegasus represents a critical threat vector for targeted surveillance, especially against high-value individuals and organizations.

Detailed information about OSINT - AmnestyTech/investigations/master/2021-07-18_nso/pegasus.stix2. Get real-time updates, technical details, and mitigation stra

OSINT - AmnestyTech/investigations/master/2021-07-18_nso/pegasus.stix2 - Live Threat Intelligence - Threat Radar | OffSeq.com

This threat intelligence report pertains to OSINT (Open Source Intelligence) related to domains associated with the NSO Group, a known surveillance vendor. The NSO Group is widely recognized for developing sophisticated spyware tools, such as Pegasus, which have been used to conduct targeted surveillance on individuals, including journalists, activists, and government officials. The report highlights the identification and monitoring of domains linked to NSO Group activities, which can be instrumental in tracking infrastructure used for command and control (C2), malware distribution, or data exfiltration. Although no specific vulnerabilities or exploits are detailed, the presence of NSO-related domains in OSINT repositories suggests ongoing surveillance operations or preparations thereof. The threat level is marked as high, reflecting the potential severity of NSO Group's capabilities and the sensitivity of their targets. The analysis certainty is moderate (50%), indicating that while the domains are linked to NSO, the full extent of their use or compromise is not fully confirmed. No direct exploits in the wild are reported, but the nature of the threat actor implies a high risk for targeted attacks leveraging advanced persistent threat (APT) techniques. The lack of affected product versions or patches indicates this is an intelligence report rather than a vulnerability advisory. The technical details show a low threat level rating (1) but a higher analysis rating (2), suggesting the intelligence is still under evaluation. Overall, this threat represents a significant concern for entities that may be targeted by state-sponsored surveillance campaigns using NSO Group tools and infrastructure.

Detailed information about OSINT - NSO related domains. Get real-time updates, technical details, and mitigation strategies.

Title	Severity	Type	Source	Date

Threats Tagged 'misp-galaxy:surveillance-vendor="nso group"'

Filter Threats