TLDR InfoSec · ATTACKS & VULNERABILITIES

DUSTING OFF OLD FINGERPRINTS: NSO GROUP’S UNKNOWN MMS HACK

enea.com9 min read

Summary from the TLDR InfoSec newsletter

ENEA, a Sweden-based telecom security firm, claims that it has reproduced a previously unknown hack disclosed by the NSO Group that uses an "MMS Fingerprint" attack. This term is new to the industry and was not present anywhere online except in the court case. The attack reveals the target device and OS version through an MMS sent to the device without user interaction, engagement, or message opening.