Google’s TAG reported that RCS Labs, an Italian surveillance firm, was aided by ISPs in Kazakhstan and Italy to compromise iOS and Android users with the Hermit spyware. The attackers provided a page in Italian language to download either Messenger, Instagram, or WhatsApp. For the iOS version, hackers followed the method suggested by Apple to distribute proprietary in-house apps to Apple devices.