adplus-dvertising
Connect with us

News

Exclusive-iPhone flaw exploited by second Israeli spy firm-sources

Published

 on

A flaw in Apple’s software exploited by Israeli surveillance firm NSO Group to break into iPhones in 2021 was simultaneously abused by a competing company, according to five people familiar with the matter.

QuaDream, the sources said, is a smaller and lower profile Israeli firm that also develops smartphone hacking tools intended for government clients.

The two rival businesses gained the same ability last year to remotely break into iPhones, according to the five sources, meaning that both firms could compromise Apple phones without an owner needing to open a malicious link. That two firms employed the same sophisticated hacking technique – known as a “zero-click” – shows that phones are more vulnerable to powerful digital spying tools than the industry will admit, one expert said.

“People want to believe they’re secure, and phone companies want you to believe they’re secure. What we’ve learned is, they’re not,” said Dave Aitel, a partner at Cordyceps Systems, a cybersecurity firm.

Experts analyzing intrusions engineered by NSO Group and QuaDream since last year believe the two companies used very similar software exploits, known as ForcedEntry, to hijack iPhones.

An exploit is computer code designed to leverage a set of specific software vulnerabilities, giving a hacker unauthorized access to data.

The analysts believed NSO and QuaDream’s exploits were similar because they leveraged many of the same vulnerabilities hidden deep inside Apple’s instant messaging platform and used a comparable approach to plant malicious software on targeted devices, according to three of the sources.

Bill Marczak, a security researcher with digital watchdog Citizen Lab who has been studying both companies’ hacking tools, told Reuters that QuaDream’s zero-click capability seemed “on par” with NSO’s.

Reuters made repeated attempts to reach QuaDream for comment, sending messages to executives and business partners. A Reuters journalist last week visited QuaDream’s office, in the Tel Aviv suburb of Ramat Gan, but no one answered the door. Israeli lawyer Vibeke Dank, whose email was listed on QuaDream’s corporate registration form, also did not return repeated messages.

An Apple spokesman declined to comment on QuaDream or say what if any action they planned to take with regard to the company.

ForcedEntry is viewed as “one of the most technically sophisticated exploits” ever captured by security researchers.

So similar were the two versions of ForcedEntry that when Apple fixed the underlying flaws in September 2021 it rendered both NSO and QuaDream’s spy software ineffective, according to two people familiar with the matter.

In a written statement, an NSO spokeswoman said the company “did not cooperate” with QuaDream but that “the cyber intelligence industry continues to grow rapidly globally.”

Apple sued NSO Group over ForcedEntry in November, claiming that NSO had violated Apple’s user terms and services agreement. The case is still in its early stages.

In its lawsuit, Apple said that it “continuously and successfully fends off a variety of hacking attempts.” NSO has denied any wrongdoing.

Spyware companies have long argued they sell high-powered technology to help governments thwart national security threats. But human rights groups and journalists have repeatedly documented the use of spyware to attack civil society, undermine political opposition, and interfere with elections.

Apple notified thousands of ForcedEntry targets in November, making elected officials, journalists, and human rights workers around the world realize they had been placed under surveillance.

In Uganda, for example, NSO’s ForcedEntry was used to spy on U.S. diplomats, Reuters reported .

In addition to the Apple lawsuit, Meta’s WhatsApp is also litigating over the alleged abuse of its platform. In November, NSO was put on a trade blacklist by the U.S. Commerce Department over human rights concerns.

Unlike NSO, QuaDream has kept a lower profile despite serving some of the same government clients. The company has no website touting its business and employees have been told to keep any reference to their employer off social media, according to a person familiar with the company.

REIGN

QuaDream was founded in 2016 by Ilan Dabelstein, a former Israeli military official, and by two former NSO employees, Guy Geva and Nimrod Reznik, according to Israeli corporate records and two people familiar with the business. Reuters could not reach the three executives for comment.

Like NSO’s Pegasus spyware, QuaDream’s flagship product – called REIGN – could take control of a smartphone, scooping up instant messages from services such as WhatsApp, Telegram, and Signal, as well as emails, photos, texts and contacts, according to two product brochures from 2019 and 2020 which were reviewed by Reuters.

REIGN’s “Premium Collection” capabilities included the “real time call recordings”, “camera activation – front and back” and “microphone activation”, one brochure said.

Prices appeared to vary. One QuaDream system, which would have given customers the ability to launch 50 smartphone break-ins per year, was being offered for $2.2 million exclusive of maintenance costs, according to the 2019 brochure. Two people familiar with the software’s sales said the price for REIGN was typically higher.

Over the years, QuaDream and NSO Group employed some of the same engineering talent, according to three people familiar with the matter. Two of those sources said the companies did not collaborate on their iPhone hacks, coming up with their own ways to take advantage of vulnerabilities.

Several of QuaDream’s buyers have also overlapped with NSO’s, four of the sources said, including Saudi Arabia and Mexico – both of whom have been accused of misusing spy software to target political opponents.

One of QuaDream’s first clients was the Singaporean government, two of the sources said, and documentation reviewed by Reuters shows the company’s surveillance technology was pitched to the Indonesian government as well. Reuters couldn’t determine if Indonesia became a client.

Mexican, Singaporean, Indonesian and Saudi officials did not return messages seeking comment about QuaDream.

 

(Reporting by Christopher Bing and Raphael Satter in Washington. Joseph Menn in San Francisco, Nir Elias in Ramat Gan, Israel, Dan Williams in Jerusalem, and Michele Kambas in Nicosia, Cyprus contributed reporting. Editing by Chris Sanders and Edward Tobin)

News

Two youths arrested after emergency alert issued in New Brunswick

Published

 on

 

MONCTON, N.B. – New Brunswick RCMP say two youths have been arrested after an emergency alert was issued Monday evening about someone carrying a gun in the province’s southeast.

Caledonia Region Mounties say they were first called out to Main Street in the community of Salisbury around 7 p.m. on reports of a shooting.

A 48-year-old man was found at the scene suffering from gunshot wounds and he was rushed to hospital with non-life-threatening injuries.

Police say in the interest of public safety, they issued an Alert Ready message at 8:15 p.m. for someone driving a silver Ford F-150 pickup truck and reportedly carrying a firearm with dangerous intent in the Salisbury and Moncton area.

Two youths were arrested without incident later in the evening in Salisbury, and the alert was cancelled just after midnight Tuesday.

Police are still looking for the silver pickup truck, covered in mud, with possible Nova Scotia licence plate HDC 958. They now confirm the truck was stolen from Central Blissville.

This report by The Canadian Press was first published Sept. 16, 2024.

The Canadian Press. All rights reserved.

Source link

Continue Reading

News

World Junior Girls Golf Championship coming to Toronto-area golf course

Published

 on

 

MISSISSAUGA, Ont. – Golf Canada has set an impressive stretch goal of having 30 professional golfers at the highest levels of the sport by 2032.

The World Junior Girls Golf Championship is a huge part of that target.

Credit Valley Golf and Country Club will host the international tournament from Sept. 30 to Oct. 5, with 24 teams representing 23 nations — Canada gets two squads — competing. Lindsay McGrath, a 17-year-old golfer from Oakville, Ont., said she’s excited to be representing Canada and continue to develop her game.

“I’m really grateful to be here,” said McGrath on Monday after a news conference in Credit Valley’s clubhouse in Mississauga, Ont. “It’s just such an awesome feeling being here and representing our country, wearing all the logos and being on Team Canada.

“I’ve always wanted to play in this tournament, so it’s really special to me.”

McGrath will be joined by Nobelle Park of Oakville, Ont., and Eileen Park of Red Deer, Alta., on Team Canada 2. All three earned their places through a qualifying tournament last month.

“I love my teammates so much,” said McGrath. “I know Nobelle and Eileen very well. I’m just so excited to be with them. We have such a great relationship.”

Shauna Liu of Maple, Ont., Calgary’s Aphrodite Deng and Clairey Lin make up Team Canada 2. Liu earned her exemption following her win at the 2024 Canadian Junior Girls Championship while Deng earned her exemption as being the low eligible Canadian on the world amateur golf ranking as of Aug. 7.

Deng was No. 175 at the time, she has since improved to No. 171 and is Canada’s lowest-ranked player.

“I think it’s a really great opportunity,” said Liu. “We don’t really get that many opportunities to play with people from across the world, so it’s really great to meet new people and play with them.

“It’s great to see maybe how they play and take parts from their game that we might also implement our own games.”

Golf Canada founded the World Junior Girls Golf Championship in 2014 to fill a void in women’s international competition and help grow its own homegrown talent. The hosts won for the first time last year when Vancouver’s Anna Huang, Toronto’s Vanessa Borovilos and Vancouver’s Vanessa Zhang won team gold and Huang earned individual silver.

Medallists who have gone on to win on the LPGA Tour include Brooke Henderson of Smiths Falls, Ont., who was fourth in the individual competition at the inaugural tournament. She was on Canada’s bronze-medal team in 2014 with Selena Costabile of Thornhill, Ont., and Calgary’s Jaclyn Lee.

Other notable competitors who went on to become LPGA Tour winners include Angel Yin and Megan Khang of the United States, as well as Yuka Saso of the Philippines, Sweden’s Linn Grant and Atthaya Thitikul of Thailand.

“It’s not if, it’s when they’re going to be on the LPGA Tour,” said Garrett Ball, Golf Canada’s chief operating officer, of how Canada’s golfers in the World Junior Girls Championship can be part of the organization’s goal to have 30 pros in the LPGA and PGA Tours by 2032.

“Events like this, like the She Plays Golf festival that we launched two years ago, and then the CPKC Women’s Open exemptions that we utilize to bring in our national team athletes and get the experience has been important in that pathway.”

The individual winner of the World Junior Girls Golf Championship will earn a berth in next year’s CPKC Women’s Open at nearby Mississaugua Golf and Country Club.

Both clubs, as well as former RBC Canadian Open host site Glen Abbey Golf Club, were devastated by heavy rains through June and July as the Greater Toronto Area had its wettest summer in recorded history.

Jason Hanna, the chief operating officer of Credit Valley Golf and Country Club, said that he has seen the Credit River flood so badly that it affected the course’s playability a handful of times over his nearly two decades with the club.

Staff and members alike came together to clean up the course after the flooding was over, with hundreds of people coming together to make the club playable again.

“You had to show up, bring your own rake, bring your own shovel, bring your own gloves, and then we’d take them down to the golf course, assign them to areas where they would work, and then we would do a big barbecue down at the halfway house,” said Hanna. “We got guys, like, 80 years old, putting in eight-hour days down there, working away.”

This report by The Canadian Press was first published Sept. 16, 2024.

Source link

Continue Reading

News

Purple place: Mets unveil the new Grimace seat at Citi Field

Published

 on

 

NEW YORK (AP) — Fenway Park has the Ted Williams seat. And now Citi Field has the Grimace seat.

The kid-friendly McDonald’s character made another appearance at the ballpark Monday, when the New York Mets unveiled a commemorative purple seat in section 302 to honor “his special connection to Mets fans.”

Wearing his pear-shaped purple costume and a baseball glove on backwards, Grimace threw out a funny-looking first pitch — as best he could with those furry fingers and short arms — before New York beat the Miami Marlins at Citi Field on June 12.

That victory began a seven-game winning streak, and Grimace the Mets’ good-luck charm soon went viral, taking on a life of its own online.

New York is 53-31 since June 12, the best record in the majors during that span. The Mets were tied with rival Atlanta for the last National League playoff spot as they opened their final homestand of the season Monday night against Washington.

The new Grimace seat in the second deck in right field — located in row 6, seat 12 to signify 6/12 on the calendar — was brought into the Shannon Forde press conference room Monday afternoon. The character posed next to the chair and with fans who strolled into the room.

The seat is available for purchase for each of the Mets’ remaining home games.

“It’s been great to see how our fanbase created the Grimace phenomenon following his first pitch in June and in the months since,” Mets senior vice president of partnerships Brenden Mallette said in a news release. “As we explored how to further capture the magic of this moment and celebrate our new celebrity fan, installing a commemorative seat ahead of fan appreciation weekend felt like the perfect way to give something back to the fans in a fun and unique way.”

Up in Boston, the famous Ted Williams seat is painted bright red among rows of green chairs deep in the right-field stands at Fenway Park to mark where a reported 502-foot homer hit by the Hall of Fame slugger landed in June 1946.

So, does this catapult Grimace into Splendid Splinter territory?

“I don’t know if we put him on the same level,” Mets executive vice president and chief marketing officer Andy Goldberg said with a grin.

“It’s just been a fun year, and at the same time, we’ve been playing great ball. Ever since the end of May, we have been crushing it,” he explained. “So I think that added to the mystique.”

___

AP MLB:

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending