HomeAsiaPegasus in the Sands: Journalists' iPhones Hacked in Jordan, Raising Alarms on...

Pegasus in the Sands: Journalists’ iPhones Hacked in Jordan, Raising Alarms on Spyware’s Reach

Date:

Related stories

spot_imgspot_imgspot_imgspot_img

The Pegasus Project, a global investigation into the NSO Group’s notorious spyware, revealed shocking intrusions into the iPhones of journalists, activists, and human rights defenders in Jordan.

This incident reignites crucial questions about digital privacy, government surveillance, and the chilling reach of powerful cyber tools. Let’s delve into the details, explore potential consequences, and consider essential steps to bolster digital security.

The Pegasus Intrusions:

A joint investigation by Access Now and the Citizen Lab discovered Pegasus spyware on the devices of at least 35 individuals in Jordan, including prominent journalists, lawyers, and civil society members. The attacks spanned from early 2020 to late 2023, suggesting a sustained campaign of targeted surveillance. While the investigation couldn’t definitively attribute the hacking to the Jordanian government, the Pegasus Group’s history of collaborating with authoritarian regimes raises serious concerns.

Implications and Impact:

These intrusions into journalists’ phones represent a direct attack on press freedom and the free flow of information. Access to confidential sources, journalistic notes, and communications becomes compromised, potentially chilling investigative reporting and critical discourse. The chilling effect extends beyond journalists, impacting activists, lawyers, and anyone deemed a “threat” by those wielding Pegasus.

10 Steps to Strengthen Your Digital Defenses:

While Pegasus and similar tools pose significant challenges, individual actions can mitigate the risks:

  1. Update software and operating systems regularly. Patching vulnerabilities closes entry points for attackers.
  2. Enable multi-factor authentication (MFA) for all accounts. Adding an extra layer of security makes unauthorized access harder.
  3. Be cautious of suspicious links and attachments, even from known contacts. Phishing emails can be highly targeted and convincing.
  4. Use strong, unique passwords and a password manager. Complex passwords are harder to crack, and a manager helps you keep track.
  5. Avoid public Wi-Fi for sensitive activities. Use a VPN for added encryption if necessary.
  6. Encrypt sensitive data on your devices. This protects information even if stolen.
  7. Stay informed about the latest security threats. Knowledge is power in the fight against cybercrime.
  8. Use secure communication tools like Signal or WhatsApp with encryption enabled.
  9. Consider security awareness training for yourself and your organization. Knowledge empowers everyone to stay safe.
  10. Report suspicious activity to the authorities. Help protect others by sharing information about potential threats.

Conclusion:

The Pegasus intrusions in Jordan serve as a stark reminder of the ever-evolving cybersecurity landscape and the need for vigilance. While advanced tools pose substantial challenges, a combination of individual awareness, proactive security measures, and collective action can create a more secure digital environment. Remember, protecting your information and advocating for responsible surveillance practices are fundamental in safeguarding our digital rights and fostering a free and open society.

Ouaissou DEMBELE
Ouaissou DEMBELE
Ouaissou Dembele is a cybersecurity strategist with over 13 years of experience in purple teaming, governance, risk and compliance (GRC), and security program leadership across the Middle East and Africa. He is Director at Sainttly Group, a UAE-based group comprising Saintynet Cybersecurity, Cybercory Magazine, CISO Paradise, and Digitallium Software, and serves as Editor-in-Chief of Cybercory. At Saintynet Cybersecurity, he leads cybersecurity strategy and delivery across consulting, SOC and MSSP services, regulatory compliance, and training, guiding governments, banks, telecoms, and enterprises in identifying and mitigating evolving threats. His work includes national-level SOC initiatives for African governments. His mission is to empower organizations with resilient, scalable, and future-ready cybersecurity. Before Sainttly Group, he held consulting roles across the MEA region, working with global organizations on security architecture, operations, and compliance programs. He is an experienced speaker and trainer, regularly contributing to industry conferences and professional events, and works in English, French, and Arabic. His certifications include CCNP Security, CCNA Security, CCNA R&S, CEH, and ITIL, alongside the CCIE Security written exam. He delivers certification preparation training for CISSP, CISM, CISA, CCSP, PMP, and ISO 27001, and holds a Master's Diploma in Network Security (2013). As Editor-in-Chief of Cybercory.com, he is a trusted voice in the regional cybersecurity community and an advisor to organizations seeking to strengthen their security posture and resilience.

Subscribe

- Never miss a story with notifications

- Gain full access to our premium content

- Browse free from up to 5 devices at once

Latest stories

spot_imgspot_imgspot_imgspot_img