RCS Lab spyware uses known exploits to install harmful payloads and steal private user data, according to a Google report.
Google’s Threat Analysis Group (TAG) has identified Italian vendor RCS Lab as a spyware offender, developing tools that are being used to exploit zero-day vulnerabilities to effect attacks on iOS and Android mobile users in Italy and Kazakhstan. According to a Google blog post on Thursday, RCS Lab uses a combination of tactics, including atypical drive-by downloads as initial infection vectors. The company has developed tools to spy on the private data of the targeted devices, the post said. Milan-based RCS Lab claims to have affiliates in France and Spain, and has listed European government agencies as its clients on its website. It claims to deliver „cutting-edge technical solutions“ in the field of lawful interception. The company was unavailable for comment and did not respond to email queries. In a statement to Reuters, RCS Lab said, „RCS Lab personnel are not exposed, nor participate in any activities conducted by the relevant customers.
