Hi! Today we'll talk about how the Pegasus spyware created by NSO Group works, and why people working in security don't have colleagues. Pegasus has been in the news lately, due to leaks about who was targeted. I hope this video will introduce you to the principle of operation of such software and will be an interesting read. I recorded it before the news that Roman Giertych, Ewa Wrzosek, and Krzysztof Brejza were the targets of these attacks. Chapters: 00:00 Intro 00:24 A bit of context 01:05 How it used to be 01:39 Creators of such software 02:32 Who started it? 03:49 NSO Group 04:28 Pegasus 04:50 A discarded leaflet, or what can it do? 05:41 But how does it work? 06:26 Attacking the victim 07:26 How were people infected in the past? English: 09:19 What happened after I obtained administrator rights? 09:49 How do I communicate with the database? 10:34 Clients 11:01 How do we know about this? 12:22 Forbidden Stories and The Pegasus Project 14:14 Surveillance of Jamal Khashoggi 15:00 Pegasus is a Cyber ​​Weapon 15:21 How do the victims react? 16:11 Media storm 16:54 NSO Report 18:34 How does the Polish CBA spy? 18:54 Are you also being wiretapped? 20:02 Who is on the other side? 21:15 What to Do and How to Live? 23:47 Outro Sources: ????️ How was Hacking Team hacked? https://bit.ly/32AaVur ???? ETH Zurich Osint Report on Unit 8200 https://bit.ly/32ypnmw ???? Whitepaper on the history of stuxnet https://bit.ly/3qxm0oq ???? Hacking Team emails on WikiLeaks https://bit.ly/3qnIVCh ???? NSO Group website https://bit.ly/3eniY07 ???? Pegasus sales flyer https://bit.ly/3qq10jb ???? How Pegasus works - technical analysis, Max Bazaliy https://bit.ly/30YqSKg ???? Black Hat presentation on Pegasus attack details https://bit.ly/310qpYb ???? The great iPwn - CitizenLab on zero-click attack on iMessage on iOS 13.5.1 https://bit.ly/32Ab94L ???????? How US diplomats were attacked in Uganda https://bit.ly/3qnJ8Fz ???? Why it's better not to have macro support enabled https://bit.ly/3mASpsN ????The Guardian on abuses in the use of cyber weapons https://bit.ly/343bEVL ????️Amnesty International on newer NSO attack methods https://bit.ly/3FxYhug ????How to catch Pegasus? Amnesty International https://bit.ly/32Abcxt ???? Washington Post on NSO https://wapo.st/3enlxzg ❌ Forbidden Stories on Pegasus https://bit.ly/3swXIgD ????‍⚖️ Cnet on Apple's lawsuit against NSO https://cnet.co/3eqj07w ????‍???? Hackers for Hire, NYT article https://nyti.ms/3enlH9Q ⚔️ How Online Mercenaries Fight on Behalf of Authoritarian Regimes, NYT article https://nyti.ms/3qnYYQF ???????? Citizen Lab at the University of Toronto https://bit.ly/3HaZzMi ???? How to turn off iMessage? https://apple.co/3JjsPlL ????️ Amnesty International's Toolkit to check if we are infected https://bit.ly/3yZlYJs ???? Lookout - together with Amnesty International, they analyzed infected devices https://bit.ly/3z23IPD ???? I used a fragment of “CAPTAIN BOMBA: Bogusław Łęcina & Friends part 1“ https://bit.ly/3my4ore Thank you for hosting Katowice Cybermachina! When creating this material, I used only publicly available sources, most of which you will find in the film description. © All trademarks belong to their rightful owners. Thank you for your attention. ❤️ You can also find me on; Instagram @mateuszemsi / mateuszemsi Twitter @MateuszChrobok / mateuszchrobok LinkedIn @mateuszchrobok / mateuszchrobok Podcasts on Anchor https://anchor.fm/mateusz-chrobok Podcasts on Spotify https://open.spotify.com/show/6y6oWs2... Podcast on Apple Podcasts https://podcasts.apple.com/us/podcast... Patronite @MateuszChrobok https://patronite.pl/MateuszChrobok