An Insight Into Hermit Spyware

Hermit, much like Pegasus, boasts capabilities like call tracking, location tracing, reading text messages, accessing photos, recording audio, intercepting and making phone calls, and even gaining root access on Android devices. Attackers often impersonate the victim’s mobile carrier, sometimes even with the carrier’s assistance, to trick the victim into downloading an app that carries the spyware. In some instances, they disguise themselves as legitimate messaging apps.

It remains uncertain whether the attackers actually collaborated with the ISPs or had an insider performing these actions for them. Either way, the implications are severe.

Such attacks are typically directed at specific targets, which may include journalists, activists, and politicians.

The Impact and Distribution of Hermit

Google’s Threat Analysis Group (TAG) reports that Hermit is disseminated through text messages that appear to originate from credible sources. It can mimic messages sent by telecom companies, thereby deceiving users into downloading it.

Upon installation, the Hermit spyware downloads additional components as needed. Similar to other spyware, it employs its modular capabilities to collect call logs, messages, photos, emails, and audio.

Hermit can reroute phone calls, disclose the device’s exact location, and even root phones by controlling files from command-and-control servers.

For further insights into other bank exams, candidates can refer to the following links: