Behind the Advisory: Decoding Apple’s Alert and Spyware Dilemma

**Executive summary:** CloudSEK researchers investigated deep/dark web and IRC/Telegram sources after an Apple advisory and found numerous actors falsely marketing malware as the Pegasus spyware; they collected ~15 samples and 30+ indicators (hashes, demonstrations, snapshots) showing widespread fraud and active distribution of self-created spyware branded as Pegasus, and observed pricing claims and access sales intended to monetize the Pegasus reputation.