Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
A technical analysis of Pegasus for Android – Part 3
Malware Families
Excerpt
Summary Pegasus is a spyware developed by the NSO group that was repeatedly analyzed by Amnesty International and CitizenLab . In this article, we dissect the Android version that was initially analyzed by Lookout in this paper , and we recommend reading it along with this post. During our research about Pegasus for Android, we’ve found out that vendors wrongly attributed some undocumented APK files to Pegasus, as highlighted by a researcher here…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…