Col. Florian Manet, who heads France’s Home Affairs Ministry National Cyber Command Technical Department, said in a statement issued by Australian police that his officers provided technical resources to the task force over several years that helped decrypt the communications.
McCartney said the French had “provided a foot in the door” for Australian police to decrypt Ghost communications.
Australian police technicians were able to modify software updates regularly pushed out by the administrator, McCartney said.
“In effect, we infected the devices, enabling us to access the content on Australian devices,” McCartney said, adding that the alleged administrator lived in his parents’ Sydney home and had no police record.
It’s hard to parse what happened here. Sounds like a MITM attack where they gained access to the device OS which allowed them to view messages once decrypted by the device?
jbloggs777@discuss.tchncs.de
on 18 Sep 2024 18:21
nextcollapse
A supply chain attack of some kind. Perhaps the app was distributed via a private store app where the french authorities had some leverage. I wonder if we’ll find out.
Badeendje@lemmy.world
on 18 Sep 2024 18:23
nextcollapse
Or the French shared how to infiltratie the server itself.
CaptainSpaceman@lemmy.world
on 18 Sep 2024 19:04
collapse
Concerning that theyre spying on citizens BEFORE knowing what they are talking about.
5 Eyes continues its horrendous nature,why am I surprised.
threaded - newest
It’s hard to parse what happened here. Sounds like a MITM attack where they gained access to the device OS which allowed them to view messages once decrypted by the device?
A supply chain attack of some kind. Perhaps the app was distributed via a private store app where the french authorities had some leverage. I wonder if we’ll find out.
Or the French shared how to infiltratie the server itself.
Concerning that theyre spying on citizens BEFORE knowing what they are talking about.
5 Eyes continues its horrendous nature,why am I surprised.
France isn’t part of Five Eyes.
.
Australia is, and France is their ally.
They are part of nine eyes
Sounds like they were able to I ject bad code via updates?
Again opsec fail... Encryption didn't