Pegasus Spyware Targets Journalists And Activists

This report analyzes commercial espionage spyware (NSO Group's Pegasus and Candiru's DevilsTongue), documenting their exploitation of zero-day/browser vulnerabilities to perform remote compromise and data exfiltration from mobile and Windows systems, describing attack chains (phishing/browser exploits, kernel jailbreaks, COM hijacking, signed driver abuse), listing CVEs, IoCs and a Yara detection rule, and providing mitigation recommendations.