Forget Pegasus, new spyware 'Hermit' now being used by governments Hermit is a modular spyware that hides its malicious capabilities in packages downloaded after it's deployed https://www.deccanherald.com/international/world-news-politics/forget-pegasus-new-spyware-hermit-now-being-used-by-governments-1119178.html Jun 18 2022
Cyber-security researchers have unearthed a new enterprise-grade Android spyware. "Based on our analysis, the spyware, which we named 'Hermit' is likely developed by Italian spyware vendor RCS Lab and Tykelab Srl, a telecommunications solutions company we suspect to be operating as a front company,"
RCS Lab, a known developer that has been active for over three decades, operates in the same market as Pegasus developer NSO Group Technologies and Gamma Group, which created FinFisher. RCS Lab has engaged with military and intelligence agencies in Pakistan, Chile, Mongolia, Bangladesh, Vietnam, Myanmar and Turkmenistan.
Collectively branded as "lawful intercept" companies, they claim to only sell to customers with legitimate use for surveillanceware, such as intelligence and law enforcement agencies. "In reality, such tools have often been abused under the guise of national security to spy on business executives, human rights activists, journalists, academics and government officials,"
Hermit is a modular spyware that hides its malicious capabilities in packages downloaded after it's deployed. These modules, along with the permissions the core apps have, enable Hermit to exploit a rooted device, record audio and make and redirect phone calls, as well as collect data such as call logs, contacts, photos, device location and SMS messages.