Effects of Weaponized Malware on End-to-End Encryption and Exfiltrating Data from Signal Messenger
summary
Overview of how commercial spyware like NSO Group’s Pegasus, Intellexa’s Predator and RCS Labs’ Hermit use zero-click exploits and tactical infections to get root on phones, with Google reporting 97 zero days in 2023 and market prices around $2.5M Android zero-click and $2M iPhone zero-click. Demonstrated technique shows privilege escalation to copy Android keystore, open Signal’s encrypted database and exfiltrate messages and attachments. Also covers network injection, C2 update channels, persistence modules and physical extraction tools from Cellebrite and Magnet Forensics.
AI-written summary · about
chapters (8)
- 0:00Introduction to weaponized malware
- 1:02What is weaponized malware
- 6:18Key players in spyware industry
- 13:45Shift to private sector tools
- 26:44Encryption bypass in secure apps
- 31:59Live demo of Signal data exfiltration
- 38:37Protecting against spyware attacks
- 45:21Q&A on spyware defenses
related talks
45mKeynote Address: Click Here to Hack Your Target: A Perspective on the Past...
33mWhen Attackers Go Mobile-First with AI
49mThe State Of Malware From The Eye Of The Tiger
56mCybersecurity & Privacy From The Global Lens
32mUsing Geopolitical Conflicts for Threat Hunting
51mThe World Of Spyware For Rent
42mThe Ways Hackers Are Taking To Win The Mobile Malware Battle
32m(In)Secure Messaging Apps: A Lateral Movement Into Your Privacy