Sounds like they were able to I ject bad code via updates?
Again opsec fail... Encryption didn't
this post was submitted on 18 Sep 2024
69 points (97.3% liked)
Technology
58123 readers
4021 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Col. Florian Manet, who heads France’s Home Affairs Ministry National Cyber Command Technical Department, said in a statement issued by Australian police that his officers provided technical resources to the task force over several years that helped decrypt the communications.
McCartney said the French had “provided a foot in the door” for Australian police to decrypt Ghost communications.
Australian police technicians were able to modify software updates regularly pushed out by the administrator, McCartney said.
“In effect, we infected the devices, enabling us to access the content on Australian devices,” McCartney said, adding that the alleged administrator lived in his parents’ Sydney home and had no police record.
It's hard to parse what happened here. Sounds like a MITM attack where they gained access to the device OS which allowed them to view messages once decrypted by the device?
Concerning that theyre spying on citizens BEFORE knowing what they are talking about.
5 Eyes continues its horrendous nature,why am I surprised.
France isn't part of Five Eyes.
They are part of nine eyes
Australia is, and France is their ally.
Or the French shared how to infiltratie the server itself.
A supply chain attack of some kind. Perhaps the app was distributed via a private store app where the french authorities had some leverage. I wonder if we'll find out.