Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

7/6/2018
11:20 AM
50%
50%

Former NSO Group Employee Steals, Sells Spy Tools

The Israeli hacking firm says its stolen software is worth hundreds of millions of dollars.

NSO Group reports a former employee stole mobile hacking tools and tried to sell them on the Dark Web for $50 million in digital currency, according to a new indictment.

The Israeli hacking firm, primarily known for selling malware to break into iPhones, believes its mobile spy tools might have been sold to threat actors. A former employee allegedly stole malware, worth hundreds of millions of dollars, prior to his dismissal and attempted to sell it. The person he contacted as a potential buyer reported the illicit activity to NSO Group.

On June 5, officials arrested a suspect who previously worked for NSO Group as a senior programmer with access to corporate servers and privately owned tools, Reuters reports. He has been charged with employee theft, attempting to sell security software unlawfully, and attempting to harm property in a way that could prove harmful to state security.

Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
MelBrandle
50%
50%
MelBrandle,
User Rank: Moderator
12/23/2018 | 1:15:09 AM
Money is the root of evil.
I wouldn't be surprised that there's a huge demand for such technology and if this employee has felt that the company has done something wrong against him, I wouldn't be surprised that he's felt he needs to try and get a little something-something out of the business before he leaves. It's definitely not the right thing to do, but I can certainly see why he would want to do it. Money is the root of all evil after all.
StephenGiderson
50%
50%
StephenGiderson,
User Rank: Strategist
12/14/2018 | 3:47:09 AM
Be on guard
This is not the first coverage I have read whereby usually the employees of that very company are the ones to be doing all the dirty work. Most of the time it is about money whereas on other occasions, it could be out of spite. This is when the recruitment department needs to be on guard and perform intense analysis before hiring any new individuals especially for their security department.
HackerOne Drops Mobile Voting App Vendor Voatz
Dark Reading Staff 3/30/2020
Limited-Time Free Offers to Secure the Enterprise Amid COVID-19
Curtis Franklin Jr., Senior Editor at Dark Reading,  3/31/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11542
PUBLISHED: 2020-04-04
3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the <KEY>MYKEY</KEY> substring.
CVE-2020-11533
PUBLISHED: 2020-04-04
Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material).
CVE-2020-11529
PUBLISHED: 2020-04-04
Common/Grav.php in Grav before 1.6.23 has an Open Redirect.
CVE-2020-11527
PUBLISHED: 2020-04-04
In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.
CVE-2020-11528
PUBLISHED: 2020-04-04
bit2spr 1992-06-07 has a stack-based buffer overflow (129-byte write) in conv_bitmap in bit2spr.c via a long line in a bitmap file.