Donncha Ó Cearbhaill

NSO Group has continued to make headlines for all the wrong reasons. This talk will provide a behind-the-scenes look at how Amnesty International's Security Lab tracked NSO Group spyware over years and developed innovative forensic tools and techniques to detect the supposedly "undetectable" Pegasus spyware on infected devices. These tools were ultimately used to identify traces of Pegasus spyware on the devices of numerous activists and journalists around the world. The talk will demonstrate the open-source mobile forensic tool MVT, developed by Amnesty International during this investigation, which can be used to check mobile devices for signs of Pegasus and other sophisticated mobile spyware threats.