Oh s#!t, Sherlock

Summary

Israeli software maker Insanet has developed a commercial product called Sherlock that can infect devices via online adverts to snoop on targets and collect data about them for the biz’s clients. This is the first time details of Insanet and its surveillanceware have been made public. Sherlock is capable of drilling its way into Microsoft Windows, Google Android, and Apple iOS devices. Insanet received approval from Israel’s Defense Ministry to sell Sherlock globally as a military product albeit under various tight restrictions, such as only selling to Western nations.

To market its snoopware, Insanet reportedly teamed up with Candiru, an Israel-based spyware maker that has been sanctioned in the US, to offer Sherlock along with Candiru’s spyware.

The Electronic Frontier Foundation’s Director of Activism Jason Kelley said Insanet’s use of advertising technology to infect devices and spy on clients’ targets makes it especially worrisome.

There are some measures netizens can take to protect themselves from Sherlock and other data-harvesting technologies.

  • not loading JavaScript
  • using ad blockers or privacy-aware browsers
  • not clicking on advertisements
  • pass consumer data privacy laws
  • SulaymanF@lemmy.worldEnglish
    653·
    1 year ago

    We need to treat the rightwing Israeli government like the pariah that they are. If North Korea was selling tools like this there would be consequences. Meanwhile Israel repeatedly sells Pegasus and other hack tools and spies on democracy activists.

    • SinningStromgald@lemmy.world
      221·
      1 year ago

      We should but we won’t. Same with Qatar, Saudi Arabia etc. Gotta keep a foot in the shitpie we made of the Middle East to make sure the oil flows.

    • pensivepangolin@lemmy.worldEnglish
      71·
      1 year ago

      Wow that’s racist.

      Joking, of course. It’s an ethnostate with a deeply authoritarian government that is actively commuting human rights atrocities and violating international laws and treaties.

      Typing that out I just realized why we support them.

  • ArbiterXero@lemmy.worldEnglish
    251·
    1 year ago

    But don’t worry about Google’s web environment integrity….

    There should be no reason to block ads

    • SpikesOtherDog@ani.social
      2·
      1 year ago

      SHOULD. If they weren’t intrusive over what I’m trying to see, trying to mimic download links, tracking me at best and serving malware at worst.

  • spacedance@sh.itjust.works
    252·
    1 year ago

    It would be good if Israel faced consequences for the amount of spyware companies they let freely operate and target people from their country.

  • helmet91@lemmy.world
    181·
    1 year ago
    • not clicking on advertisements

    Even if someone doesn’t use an adblocker for some reason… who the fuck would click on ads?!

    • Hamartiogonic@sopuli.xyz
      4·
      1 year ago

      It’s a really strange concept, but there are people who use ads to discover new products that solve specific problems they have. This method is just so flawed in so many ways, that I don’t even know where to begin. Obviously, it’s not the method I would use or recommend, but there really are people who do it this way.

      I get the feeling the there’s a lot of overlap between the people who are tech savvy, privacy aware, use Linux and are on Lemmy. Therefore, there’s a pretty good chance that it’s going to be very hard to find ad clicking people in here, but you never know. If any of you are reading this: Hello. Please make an AMA. I have so many questions.

    • Eggyhead@artemis.camp
      2·
      1 year ago

      Couldn’t they just make it look like something that isn’t an ad? Such as a fake video or false “download” button?