Mobile Verification Toolkit

The Mobile Verification Toolkit (MVT) is a powerful, open-source tool developed by Amnesty International's Security Lab to facilitate the consensual forensic analysis of Android and iOS devices. Its primary purpose is to help identify potential signs of compromise, such as traces of surveillance spyware, on mobile devices.

MVT was first released in July 2021 as part of the groundbreaking Pegasus Project, which investigated the widespread abuse of the Pegasus spyware created by the NSO Group. Since then, it has been maintained and enhanced by Amnesty International and a community of contributors on GitHub.

The toolkit provides two command-line tools: mvt-ios for iOS devices and mvt-android for Android devices. These tools enable experts to extract and analyze data from mobile devices, uncovering suspicious artifacts, configuration changes, and other indicators that may point to the presence of spyware or other forms of compromise.

To use MVT effectively, physical access to the devices being inspected is required, and the analysis should be carried out with the full knowledge and consent of the device owner. Amnesty International has published a comprehensive forensic methodology alongside MVT to guide users in interpreting the results generated by the tool.

One of the key advantages of MVT is its accessibility. As an open-source project, it lowers the barrier to entry for non-profit organizations, human rights defenders, and researchers who need to perform forensic analysis of mobile devices. This is particularly important in an era of growing access to sophisticated commercial spyware, which can be used to illegally surveil and target individuals.

The project's technical documentation provides detailed instructions on installing the tool, running the device scanning commands, and working with the results to identify potential indicators of compromise. By making this knowledge more widely available, MVT empowers civil society organizations to detect and respond to these threats more effectively.

Overall, the Mobile Verification Toolkit is an essential resource for anyone concerned with protecting the right to privacy and fighting against the abuse of surveillance technology. Its ongoing development and support from the community demonstrate a shared commitment to creating a safer digital world for all.