Carding 4 Carders
Professional
- Messages
- 2,724
- Reaction score
- 1,588
- Points
- 113
Israeli companies have developed a new spyware Sherlock, from which there is no effective protection yet. It can infect devices through online advertising, collecting personal data about the victim. Writes about it Investigace.cz.
Sherlock software can infect the phones or computers of hundreds of thousands, possibly even millions of people. The program can bypass the security mechanisms of Apple, Google, and Microsoft. Unlike regular malicious ads, Sherlock gets to the device even if the user doesn't click on the ad, but just watches it.
An attacker using Sherlock creates an ad campaign aimed at a specific audience. Spyware is placed in the ad, and the infected ad is uploaded to the ad exchange. Once the spyware reaches the target audience, it is secretly installed on the victims ' phones or computers.
Experts believe that ordinary Sherlock users are unlikely to be affected: the product is expensive, and it is likely to be used against those who belong to a certain group. However, there is currently no systematic protection against such technologies, and it is not yet clear whether they can be completely blocked.
According to the expert, ad blockers, such as the AdBlock extension, can help protect against Sherlock.
According to the Washington-based research firm Carnegie,between 2011 and 2023, at least 74 governments contracted with commercial enterprises to purchase spyware. In 44 cases, these were countries with autocratic regimes.
Governments can use spyware for surveillance and intelligence gathering, as well as to fight crime and terrorism. Law enforcement agencies may also use spyware as part of investigations, especially in cases involving cybercrime, organized crime, or threats to national security.
According to Carnegie, Israel has become a leading exporter of spyware and digital forensics tools. A total of 56 out of 74 governments have purchased technology from firms such as NSO Group, Cellebrite, Cytrox and Candiru.
Sherlock spyware isn't the only one that can be installed on your phone without being noticed. The infamous Pegasus, which exploits phone vulnerabilities, also works in a similar way.
Sherlock software can infect the phones or computers of hundreds of thousands, possibly even millions of people. The program can bypass the security mechanisms of Apple, Google, and Microsoft. Unlike regular malicious ads, Sherlock gets to the device even if the user doesn't click on the ad, but just watches it.
An attacker using Sherlock creates an ad campaign aimed at a specific audience. Spyware is placed in the ad, and the infected ad is uploaded to the ad exchange. Once the spyware reaches the target audience, it is secretly installed on the victims ' phones or computers.
Experts believe that ordinary Sherlock users are unlikely to be affected: the product is expensive, and it is likely to be used against those who belong to a certain group. However, there is currently no systematic protection against such technologies, and it is not yet clear whether they can be completely blocked.
According to the expert, ad blockers, such as the AdBlock extension, can help protect against Sherlock.
According to the Washington-based research firm Carnegie,between 2011 and 2023, at least 74 governments contracted with commercial enterprises to purchase spyware. In 44 cases, these were countries with autocratic regimes.
Governments can use spyware for surveillance and intelligence gathering, as well as to fight crime and terrorism. Law enforcement agencies may also use spyware as part of investigations, especially in cases involving cybercrime, organized crime, or threats to national security.
According to Carnegie, Israel has become a leading exporter of spyware and digital forensics tools. A total of 56 out of 74 governments have purchased technology from firms such as NSO Group, Cellebrite, Cytrox and Candiru.
Sherlock spyware isn't the only one that can be installed on your phone without being noticed. The infamous Pegasus, which exploits phone vulnerabilities, also works in a similar way.
