iVerify, a mobile security firm, has introduced a spyware detection tool that has already identified seven infections by Pegasus malware since its May launch. Out of 2,500 user-submitted scans, the findings challenge the narrative that spyware like Pegasus targets only a narrow group of activists and journalists. Victims also included business leaders and government officials, highlighting its broader use.
The Mobile Threat Hunting feature uses advanced methods, including machine learning and malware signature detection, to identify spyware on iOS and Android devices. Paying users receive regular scans, while a free version allows monthly spyware checks via the iVerify Basics app. iVerify emphasizes privacy but requires users to provide an email address for results if spyware is detected.
The tool detected Pegasus infections using diagnostic data, crash logs, and shutdown logs. While refining the tool to reduce false positives is ongoing, the system has proven valuable. It uncovered spyware on devices belonging to individuals such as Sikh activist Gurpatwant Singh Pannun and campaign staff for Harris-Walz during the U.S. presidential race.
iVerify’s findings will be presented at the Objective by the Sea security conference in Hawaii. Chief Operating Officer Rocky Cole noted that mobile operating systems’ security barriers have traditionally limited spyware detection, but this new tool brings accessible solutions to a growing global problem.
