A study by Citizen Lab in the University of Toronto, between August 2016 and August 2018, has revealed the activity of a spyware, Pegasus, in Kenya. The spy tool is developed by NSO Group Technologies in Israel.
It gives the attacker the ability to monitor, record, and collect existing and future data from the phone. This includes calls and information from messaging applications and real-time location data.
The attacker is also able to remotely activate the camera and microphone to monitor the target and their surroundings.
Attackers create tailor-made messages that are sent to the targets. These messages convey a sense of urgency and contain a link or a document which the one is encouraged to click on.
The messages come in a variety of forms including SMS, email, through messaging apps such as WhatsApp or via messages on social media platforms.
Once the target has clicked on the link, then the spyware is installed on their phone.
Kenya is listed under an operator code-named GRANDLACS and has been in operation since 2017.
The spy tool, that is only sold to governments, has been used to target journalists and human rights activists around the world.
Researchers in the U.S have claimed that the group's technology was used against a political dissident in the United Arab Emirates, a journalist in Mexico and a minority party politician in Kenya.
Amnesty International has accused NSO of Impersonating a Kenyan newspaper, The East African, through their website.
