Unlike the malware used by cybercriminals to make money by stealing from and cheating their victims, Pegasus is designed solely for spying. Not just anyone can get hold of a copy of Pegasus — this isn’t something sold on eBay or even on the dark web. Software like Pegasus thrives on 0-day vulnerabilities, as do other malware authors, iPhone jailbreakers, and those who root Android devices. To exploit the 0-day bugs an attack vector is needed; a way for the exploit to get a foot in the door. You might want to look at this video about how the Chinese government used vulnerabilities in iOS to spy on people.

Source: The Nation July 25, 2021 12:00 UTC