Google warns of 'hermit spyware' infecting Android and iOS devices

Google has already identified victims in Italy and Kazahkstan
By Chance Townsend  on 
man's silhouette red background
Credit: Bill Hinton via Getty

As part of Google's efforts to track the activities of commercial spyware vendors, the company's Threat Analysis Group (TAG) released a report Thursday on spyware campaigns targeting Android and iOS users.

Google TAG researchers Benoit Sevens and Clement Lecigne go into detail about the use of entrepreneurial grade spyware dubbed "Hermit." This sophisticated spyware tool allows attackers to steal data, private messages and make phone calls. In their report, TAG researchers attributed Hermit to RCS Labs, a commercial spyware vendor based in Italy.

Hermit poses many significant dangers. Due to its modularity, Hermit is quite customizable, allowing the functions of the spyware to be altered to the will of its user. Once fully situated on a target's phone, attackers can harvest sensitive information such as call logs, contacts, photos, precise location, and SMS messages.

An explainer: What is 'hermit spyware' and how can you protect yourself from it?

Sevens and Lecigne's full report details the ways in which attackers can access both Android and iOS devices through the use of clever tricks and drive-by attacks. Potential targets of this scam will have their data disabled through their ISP carrier before sending a malicious link via text to get them to ‘fix’ the issue. If that doesn't work, targets will be tricked into downloading malicious apps masqueraded as messaging applications.

Just last week, cybersecurity firm Lookout reported the use of Hermit by agents working in the governments of Kazakhstan, Syria, and Italy. Google has already identified victims in these countries, stating that "TAG is actively tracking more than 30 vendors with varying levels of sophistication and public exposure selling exploits or surveillance capabilities to government-backed actors."

The Milan-based company claims to provide "law enforcement agencies worldwide with cutting-edge technological solutions and technical support in the field of lawful interception for more than twenty years." More than 10,000 intercepted targets are purported to be handled daily in Europe alone.

When reached out for comment by The Hacker News, RCS Labs said its "core business is the design, production, and implementation of software platforms dedicated to lawful interception, forensic intelligence, and data analysis" and that it "helps law enforcement prevent and investigate serious crimes such as acts of terrorism, drug trafficking, organized crime, child abuse, and corruption."

Still, the news of the spyware being used by state government agents is concerning. Not only does it erode trust in the safety of the internet but it also puts at risk the lives of anyone a government considers an enemy of the state such as dissidents, journalists, human rights workers, and opposition party politicians.

"Tackling the harmful practices of the commercial surveillance industry will require a robust, comprehensive approach that includes cooperation among threat intelligence teams, network defenders, academic researchers, governments, and technology platforms," Google TAG researchers wrote. "We look forward to continuing our work in this space and advancing the safety and security of our users around the world."

Topics Cybersecurity

Headshot of a Black man
Chance Townsend
Assistant Editor, General Assignments

Currently residing in Austin, Texas, Chance Townsend is an Assistant Editor at Mashable. He has a Master's in Journalism from the University of North Texas with the bulk of his research primarily focused on online communities, dating apps, and professional wrestling.

In his free time, he's an avid cook, loves to sleep, and "enjoys" watching the Lions and Pistons break his heart on a weekly basis. If you have any stories or recipes that might be of interest you can reach him by email at [email protected].


Recommended For You
How to watch 'Lisa Frankenstein' at home: When is it streaming?
Kathryn Newton and Cole Sprouse in 'Lisa Frankenstein'


How to watch NC State vs. Marquette basketball without cable
DJ Horne #0 of the North Carolina State Wolfpack drives to the basket as Blake Lampman #11 of the Oakland Golden Grizzlies defends during the first half of a game in the second round of the NCAA Men's Basketball Tournament at PPG PAINTS Arena on March 23, 2024, in Pittsburgh, Pennsylvania.

How to watch Gonzaga vs. Purdue basketball without cable
Purdue Boilermakers guard Lance Jones (55) starts a fast break during the Purdue Boilermakers versus the Utah State Aggies in the second round of the NCAA Division I Championship on March 24, 2024, at Gainbridge Fieldhouse in Indianapolis, Indiana.

How to watch Tennessee vs. Creighton basketball without cable
Ryan Kalkbrenner #11 of the Creighton Bluejays goes to the basket in the first half of the game against the Oregon Ducks during the second round of the 2024 NCAA Men's Basketball Tournament held at PPG PAINTS Arena on March 23, 2024, in Pittsburgh, Pennsylvania.

More in Tech
Celebrate spring blooms with flowery Lego sets on sale for 20% off at Amazon
a woman builds a bouquet of lego flowers




When is the last day to file taxes?
A person at their computer holding a note that reads "tax time."

Trending on Mashable
NYT Connections today: See hints and answers for March 29
A phone displaying the New York Times game 'Connections.'

NYT Connections today: See hints and answers for March 28
A phone displaying the New York Times game 'Connections.'

Wordle today: Here's the answer and hints for March 29
a phone displaying Wordle


Wordle today: Here's the answer and hints for March 28
a phone displaying Wordle
The biggest stories of the day delivered to your inbox.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
Thanks for signing up. See you at your inbox!