Israeli firm’s spyware used against dissidents, Microsoft says

A spyware campaign using tools from a secretive Israeli firm was used to attack and impersonate dozens of human rights activists, journalists, dissidents, politicians and others, researchers said on July 15, 2021. Statements from Microsoft security researchers and the University of Toronto's Citizen Lab said powerful ‘cyberweapons’ were being used in precision attacks targeting more than 100 victims around the world. — AFP

At least 100 activists, journalists and government dissidents across 10 countries were targeted with spyware produced by an Israeli company called Candiru, according to cybersecurity researchers at the University of Toronto’s Citizen Lab, which tracks illegal hacking and surveillance.

Using a pair of vulnerabilities in Microsoft Corp’s Windows, cyber operatives operating in Saudi Arabia, Israel, Hungary, Indonesia and elsewhere purchased and installed remote spying software made by Candiru, according to the researchers. The tool was used in “precision attacks against targets’ computers, phones, network infrastructure and Internet-connected devices”, said Cristin Goodwin, general manager of Microsoft’s Digital Security Unit.