State-Backed Attackers Using Exploits Created by Commercial Spyware Vendors

blog.google

State-Backed Attackers Using Exploits Created by Commercial Spyware Vendors - 29d

State-backed attackers have been observed using tools identical or very similar to those created by commercial spyware vendors like Intellex and NSO Group. These tools, including a Safari browser exploit (CVE-2021-1879), were used to spy on the Mongolian government, highlighting the concerning trend of state actors leveraging commercially developed spyware and the potential for unintended consequences as these tools spread beyond their original intended use.

References:

blog.google - State-backed attackers have been observed using tools identical or very similar to those previously created by commercial spyware vendors like Intellex and NSO Group. - 29d
@LukaszOlejnik - Russian cyber operators ('government hackers') were using tools that were identical or very similar to those previously created by spyware tool makers Intellex and NSO Group. - 29d

Classification:

Target: Mongolian Government
Attacker: Russia
Type: Hack
Severity: Major

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.