Times of Islamabad

Israeli malware attack against top Pakistani officials, Government takes important steps

Israeli malware attack against top Pakistani officials, Government takes important steps

ISLAMABAD – To avoid further malware attacks on the Pakistani officialsbeing targeted with a hacking software involving an Israeli spyware companyNSO Group last year, the government officials now have been strictlyordered to replace their smartphones in case they were bought before May10th, 2019, upgrade their WhatsApp to the latest version which fixes thebuffer overflow issue and not share classified or official information overthe platform.

The debate about WhatsApp’s security being compromised began in May lastyear. WhatsApp had a buffer overflow “loophole” that allowed the NSO Groupto plant spyware in more than 1,400 devices, out of which some were fromPakistan.

In October, WhatsApp filed a lawsuit against the NSO Group for building andselling a hacking platform that exploited a flaw in WhatsApp-owned serversto help clients hack into the cellphones of at least 1,400 users, includingthose of Pakistan, between April 29 and May 10 last year.

The malware would allow NSO’s clients – said to be governments andintelligence organisations – to secretly spy on a phone’s owner.

In a report published on Dec. 19, the Guardian claimed that the mobilephones of at least two dozen Pakistani government officials were allegedlytargeted earlier last year with technology owned by the Israeli spywarecompany NSO Group.

According to the report, scores of Pakistani senior defence andintelligence officials were among those who could have been compromised.

Later, the Pakistan Telecommunication Authority (PTA) sought details fromWhatsApp administration, stating that users’ information has been hackedthrough malware.

In a statement issued on Twitter, the PTA had said it had “taken up thematter with WhatsApp management”.

With reference to media reports regarding @WhatsApp users being targetedworldwide including users from Pakistan with a hacking software, PTA hastaken up the matter with WhatsApp.

It had added that it intended to “get the details of users that weretargeted in Pakistan but also to have an update on the remedial measurestaken by WhatsApp to prevent” similar incident in the future.