Technical Analysis of Pegasus Spyware

[Nytro]

Technical Analysis of Pegasus Spyware

An Investigation Into Highly Sophisticated Espionage Software

 

Contents
Executive Summary
Background
Disclosure Timeline
Attack Overview
Professional Grade Development
Evolution of Software
The Trident Vulnerabilities
CVE-2016-4655: Memory Corruption in Safari Webkit
CVE-2016-4656: Kernel Information Leak Circumvents KASLR
CVE-2016-4657: Memory Corruption in Kernel leads to Jailbreak
Jailbreak Persistence
Spyware Analysis
Installation and Persistence
Persistence: JSC Privilege Escalation
Disabling Updates
Jailbreak Detection
Device Monitoring
Stealth Update to Command & Control Infrastructure
Self Destruction
Data Gathering
Calendar
Contacts
GPS location
Capturing User Passwords
WiFi and Router Passwords
Interception of Calls and Messages
Process Injection: converter
Skype
Telegram
WhatsApp
Viber
Real-Time Espionage
Conclusion

Download: https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegasus-technical-analysis.pdf