FinFisher Now Used in 36 Countries
May 2nd, 2013Via: Quartz:
A new report from Citizen Lab, a Canadian research center, shows surveillance software sold by FinFisher, a “governmental IT intrusion” company owned by the UK-registered Gamma International, is now active in 36 countries. That’s up from the 25 countries reported two months ago.
Gamma’s product, which it sells exclusively to governments, infects computers and mobile phones through devious means. These include posing as Mozilla Firefox and the (frankly quite elegant) ruse of using a “right-to-left override,” which is typically used to render writing in Arabic but can work in any language. This helps it foil users trained to look out for suspicious file extensions by hiding, say, an “.exe,” and making the file appear to be an image with a .jpg extension instead.
More: Mozilla Has Sent a Cease-and-Desist Letter to Gamma International
I haven’t seen anything about a definitive way to tell if a computer is infected with it. I’m very curious about the “posing as Mozilla Firefox” aspect of this.
FinFisher in use:
http://www.bloomberg.com/news/2012-07-25/cyber-attacks-on-activists-traced-to-finfisher-spyware-of-gamma.html
Yeah, yeah. I know: It can’t happen here. 😛