--- title: 4 things to learn from the smartphone security breaches in Mexico. description: Analyzing the smartphone breaches in Mexico to understand the dynamics of today's world with regard to mobile espionage and cyber warfare. image: https://blog.privoro.com/hubfs/Site%20support%20images/What_Can_Learn_From_Smartphone_Breachs_in_Mexico.jpg --- - [Partners](https://privoro.com/find-a-partner) - [Support](https://privoro.com/support) [![Privoro Logo](https://blog.privoro.com/hs-fs/hubfs/raw_assets/public/Privoro_November2022/images/privoro-logo.png?width=238&height=113&name=privoro-logo.png "Privoro Logo")](https://privoro.com/) - Solutions - [Phones in classified spaces](https://privoro.com/solutions/secure-spaces) - [Prevent mobile surveillance](https://privoro.com/solutions/prevent-smartphone-from-listening-and-watching) - [Stop location tracking](https://privoro.com/solutions/prevent-smartphone-location-tracking) - [Prevent wireless attacks](https://privoro.com/solutions/prevent-smartphone-wireless-attacks) - [Hide from RF detection](https://privoro.com/solutions/go-dark-from-cellular-network) - Products - [SafeCase](https://privoro.com/safecase) - [Vault](https://privoro.com/vault) - [Secure Mobility Platform](https://privoro.com/fulcrum) - Industries - [Government](https://privoro.com/government) - [Enterprise](https://privoro.com/enterprise) - Company - [About Us](https://privoro.com/about-us) - [Team](https://privoro.com/team) - [Newsroom](https://privoro.com/newsroom) - [Media Kit](https://privoro.com/media-kit) - [Blog](https://blog.privoro.com/) - [Content Library](https://privoro.com/content-library) - [Advanced Mobile Threats 101](https://privoro.com/advanced-mobile-threats-101) - [Legal](https://privoro.com/legal) ![menu bars](https://blog.privoro.com/hubfs/raw_assets/public/Privoro_November2022/images/line-bars.svg) ![Close icon](https://blog.privoro.com/hubfs/raw_assets/public/Privoro_November2022/images/times.svg) - Solutions - [Phones in classified spaces](https://privoro.com/solutions/secure-spaces) - [Prevent mobile surveillance](https://privoro.com/solutions/prevent-smartphone-from-listening-and-watching) - [Stop location tracking](https://privoro.com/solutions/prevent-smartphone-location-tracking) - [Prevent wireless attacks](https://privoro.com/solutions/prevent-smartphone-wireless-attacks) - [Hide from RF detection](https://privoro.com/solutions/go-dark-from-cellular-network) - Products - [SafeCase](https://privoro.com/safecase) - [Vault](https://privoro.com/vault) - [Secure Mobility Platform](https://privoro.com/fulcrum) - Industries - [Government](https://privoro.com/government) - [Enterprise](https://privoro.com/enterprise) - Company - [About Us](https://privoro.com/about-us) - [Team](https://privoro.com/team) - [Newsroom](https://privoro.com/newsroom) - [Media Kit](https://privoro.com/media-kit) - [Blog](https://blog.privoro.com/) - [Content Library](https://privoro.com/content-library) - [Advanced Mobile Threats 101](https://privoro.com/advanced-mobile-threats-101) - [Legal](https://privoro.com/legal) - [Partners](https://privoro.com/find-a-partner) - [Support](https://privoro.com/support) - [![Linkedin](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Linkedin.png)Opens a new window](https://www.linkedin.com/company/privoro) - [![Youtube](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Youtube.png)Opens a new window](https://www.youtube.com/channel/UCKPqnNWnZoEMfKJMtwYq5vQ) - [![Twitter](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Twitter.png)Opens a new window](https://twitter.com/privoro) - [![Facebook](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Facebook.png)Opens a new window](https://www.facebook.com/Privoro) ![close](https://blog.privoro.com/hubfs/raw_assets/public/Privoro_November2022/images/cross.svg) ## Contact Have a question or inquiry? We're here to help. ![](https://blog.privoro.com/hubfs/Site%20support%20images/What_Can_Learn_From_Smartphone_Breachs_in_Mexico.jpg) # 4 things to learn from the smartphone security breaches in Mexico. Published by [Matt Shaheen](https://blog.privoro.com/author/matt-shaheen) on Nov 15, 2017 10:55:22 AM First, everyone is susceptible to and a potential target of mobile surveillance, including chidren. This past summer, an announcement hit the international news wire declaring the [mobile devices of twenty-two prominent Mexicans](https://citizenlab.ca/wp-content/uploads/2017/08/image4.png) were discovered to be infected with sophisticated malware known as [Pegasus](https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegasus-technical-analysis.pdf). The list of targeted individuals included journalists, lawyers, public health workers, anti-corruption specialists, international investigators and members of the Mexican government. The perpetrators of the espionage program even went so far as to hack the phone of the adolesent son of one of the compromised journalists. A journalist historically critical of Mexican President, Enrique Pena Nieto. All the individuals targeted have one thing in common: they have either been critical of or represent a threat to the current Mexican administration, the Institutional Revolutionary Party (PRI). Bear in mind, the software was built by and acquired from the [NSO Group](http://www.businessinsider.com/nso-group-2016-8/#nso-group-was-founded-in-late-2009-by-serial-entrepreneurs-with-ties-to-the-israeli-government-1) – a stealthy Israeli tech company that operates in the shadows, yet [claims to have a stringent vetting process and sells exclusively to government clientele to “monitor terrorists and criminals”](https://twitter.com/lorenzoFB/status/768904173765132288). Once activated on a device, the spy software allows a hacker to gain “root access” to compromised devices. Meaning, in addition to being able to access content residing on an infected phone, the [microphones and cameras can be used to capture data within its vicinity](https://youtu.be/lsRi74hJZNk) (aka, [Proximity Data](https://blog.privoro.com/what-is-proximity-data)), [without the owner of the device ever knowing.](http://www.businessinsider.com/pegasus-nso-group-iphone-2016-8) So, the second lesson; regardless of the “intended purpose” of any monitoring software, misuse should be assumed. I grew up during the cold war when spies had to elaborately plan to capture conversations of interest. Once a target was identified, it was necessary to gain access to a location where the individual would be. Prior to the target arriving, eavesdropping equipment would need to be meticulously installed and tested. This effort took a lot of human power. In today’s ever-connected world, almost everyone on the planet carries around a device that can easily be hijacked and repurposed for eavesdropping, making the old method of “planting a bug” obsolete. In addition to utilizing the built-in audio and video capabilities, the internal GPS of a mobile phone can be used to [reveal the location of an individual, even if the phone has been turned off](https://www.techdirt.com/articles/20130723/12395923907/even-powering-down-cell-phone-cant-keep-nsa-tracking-its-location.shtml). It is easy to see why mobile phones are rapidly becoming the “target of choice” when it comes to spying on someone. Third lesson, getting malware onto digital devices is child’s play for sophistated hackers and it often comes down to social engineering. To gain control of the targeted mobile phones in Mexico, the hackers used [social engineering](https://www.webroot.com/us/en/home/resources/tips/online-shopping-banking/secure-what-is-social-engineering) and [phishing](https://en.wikipedia.org/wiki/Phishing) techniques via text messages. Each of the twenty-two targeted individuals in Mexico received texts enticing them to click on a link accompanying the message. The few who managed to avoid committing to the links would receive new, repeated attempts in a matter of days. It is easy to read the details and rush to judgement regarding the foolishness of someone clicking on a link sent from an unknown number. But who amongst us can honestly say they have always avoided clicking on a link from an unidentified number? After all, the human mind has evolved over millions of years to fill in blanks and make assumptions when information is missing. [Further confirmation, Intel Security did a survey of over 22-thousand people which revealed 97% were unable to correctly identify a well-crafted phishing email.](https://www.businesswire.com/news/home/20150512005245/en/97-People-Globally-Unable-Correctly-Identify-Phishing) There are a lot of unknown facts associated with the situation in Mexico but certain things we do know. Mexico [has admitted being a client of NSO](https://www.nytimes.com/2017/06/22/world/americas/mexico-pena-nieto-hacking-pegasus.html). Back in 2012, the [government reported it had signed a $20 million deal with the company](https://www.haaretz.com/israel-news/business/economy-finance/1.574805). It is also widely known the software was distributed to multiple government entities throughout the country making the enforcement of proper [government phone security](https://privoro.com/government) usage difficult to manage. Even with this information, there is still no concrete evidence anyone in the Mexican government misused the software. As time goes on, we may learn additional details about the situation or we may continue to be left in the dark. President Nieto has publicly stated there is an ongoing internal investigation on the matter but many are skeptical. Finally, legitimate global technology companies making surveillance software are growing and the industry is highly profitable. I hope the situation in Mexico will serve as a wake-up call to everyone. Important trends have come to light because of the situation and we all need to pay attention to [smartphone security](https://privoro.com/). Global technology surveillance companies do exist and their capabilities are being utilized to spy on people around the world. Bloomberg estimates there are 230 companies around the world in the data interception and tracking industry. The number of companies specializing in espionage via personal technology is growing and will continue to grow. The [value of the NSO Group increased from $120 million in 2014](http://jewishbusinessnews.com/2014/03/19/francisco-partners-acuires-israeli-intelligence-cyber-tracking-developer-start-up-nso-for-120-million/) to [over a $1 billion in 2017](https://www.cyberscoop.com/nso-group-for-sale-1-billion-pegasus-malware/). Undoubtedly, new players will emerge given the potential financial incentives. The fact remains, if someone wants to hack you and they have either money or technical skill, you will get hacked. The motto of the NSO Group is [“To Make the World a Safer Place"](http://www.bendbulletin.com/nation/5063332-151/government-grade-spyware-hits-mexican-advocates-of-soda-tax). After learning about the situation in Mexico and its global implications, do you feel the world is a safer place? Tags: [Mobile Security](https://blog.privoro.com/tag/mobile-security), [Mobile Surveillance](https://blog.privoro.com/tag/mobile-surveillance), [Smartphone Vulnerabilities](https://blog.privoro.com/tag/smartphone-vulnerabilities), [Mobile Tracking](https://blog.privoro.com/tag/mobile-tracking), [Mobile Espionage](https://blog.privoro.com/tag/mobile-espionage) [Back to Blog](https://blog.privoro.com) ## Related Articles ## [Voice is the next interface, but what does that mean for mobile security?](https://blog.privoro.com/voice-is-the-next-interface-but-what-does-that-mean-for-mobile-security) By John Chambers, Founder and CEO of JC2 Ventures and former CEO and Chairman of Cisco Ten years... [Read More](https://blog.privoro.com/voice-is-the-next-interface-but-what-does-that-mean-for-mobile-security) ## [The piece of hardware at the cutting edge of cybersecurity.](https://blog.privoro.com/the-piece-of-hardware-at-the-cutting-edge-of-cybersecurity) By John Chambers, Founder and CEO of JC2 Ventures and former CEO and Chairman of Cisco As a mentor,... [Read More](https://blog.privoro.com/the-piece-of-hardware-at-the-cutting-edge-of-cybersecurity) ## ["The headlines about smartphone hacks don’t pertain to me."](https://blog.privoro.com/the-headlines-about-smartphone-hacks-dont-pertain-to-me) The topic of smartphone hacking isn’t likely to make it into Monday morning watercooler... [Read More](https://blog.privoro.com/the-headlines-about-smartphone-hacks-dont-pertain-to-me) ### Stay Connected ###### Follow Privoro - [![Linkedin](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Linkedin.png)Opens a new window](https://www.linkedin.com/company/privoro) - [![Youtube](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Youtube.png)Opens a new window](https://www.youtube.com/channel/UCKPqnNWnZoEMfKJMtwYq5vQ) - [![Twitter](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Twitter.png)Opens a new window](https://twitter.com/privoro) - [![Facebook](https://blog.privoro.com/hubfs/Privoro_November2022/Images/Facebook.png)Opens a new window](https://www.facebook.com/Privoro) - [Support](https://privoro.com/support) - [Newsroom](https://privoro.com/newsroom) © 2026 Privoro LLC. All rights reserved. [Legal](https://privoro.com/legal) | [Privacy Policy](https://blog.privoro.com/hubfs/Privoro_November2022/PDFs/Privoro%20Privacy%20Policy.pdf) | [Terms of Use](https://blog.privoro.com/hubfs/Privoro_November2022/PDFs/Terms_of_Use.pdf) © 2026 Privoro LLC. All rights reserved. [Legal](https://privoro.com/legal) | [Privacy Policy](https://blog.privoro.com/hubfs/Privoro_November2022/PDFs/Privoro%20Privacy%20Policy.pdf) | [Terms of Use](https://blog.privoro.com/hubfs/Privoro_November2022/PDFs/Terms_of_Use.pdf) ![](https://googleads.g.doubleclick.net/pagead/viewthroughconversion/876226369/?guid=ON&script=0)