Australian police infiltrate encrypted messaging app Ghost and arrest dozens | AP News
Australian police infiltrate encrypted messaging app Ghost and arrest dozens | AP News
Australian police say they have infiltrated Ghost, an encrypted global communications app developed for criminals, leading to dozens of arrests.
Col. Florian Manet, who heads France’s Home Affairs Ministry National Cyber Command Technical Department, said in a statement issued by Australian police that his officers provided technical resources to the task force over several years that helped decrypt the communications.
McCartney said the French had “provided a foot in the door” for Australian police to decrypt Ghost communications.
Australian police technicians were able to modify software updates regularly pushed out by the administrator, McCartney said.
“In effect, we infected the devices, enabling us to access the content on Australian devices,” McCartney said, adding that the alleged administrator lived in his parents’ Sydney home and had no police record.
It's hard to parse what happened here. Sounds like a MITM attack where they gained access to the device OS which allowed them to view messages once decrypted by the device?
A supply chain attack of some kind. Perhaps the app was distributed via a private store app where the french authorities had some leverage. I wonder if we'll find out.
Or the French shared how to infiltratie the server itself.
Sounds like they were able to I ject bad code via updates?
Again opsec fail... Encryption didn't