Frequently Asked Questions

MVT (Mobile Verification Toolkit) is a powerful collection of forensic utilities designed to help security professionals and investigators conduct deep analysis of mobile devices to find signs of potential compromise. It automates the process of gathering forensic traces and analyzing them for indicators of sophisticated spyware, such as Pegasus and other advanced surveillance tools.

The toolkit provides specialized modules for both Android and iOS platforms, allowing you to examine device artifacts, logs, and filesystems to uncover hidden malicious activity that might otherwise go undetected.

MVT is a specialized forensic research tool intended for technologists and investigators, including:

• Security Researchers: Investigating sophisticated spyware campaigns and developing new detection methods.
• Journalists: Verifying device security when working on sensitive investigations.
• Human Rights Defenders: Protecting civil society members from targeted digital threats.
• Corporate Security Teams: Investigating potential breaches and ensuring executive device security.
• Digital Forensics Professionals: Conducting thorough mobile device analysis.

Important: MVT is not intended for end-user self-assessment. If you are concerned about your personal device security, please seek reputable expert assistance.

Getting started with MVT is designed to be straightforward for security professionals:

1. Create an Account: Sign up for a free account on our platform to access the web interface.
2. Access the App: Navigate to the MVT web application through your browser.
3. Upload Device Data: Securely upload your device acquisition files, backups, or filesystem images.
4. Initiate Analysis: Run comprehensive forensic checks across your uploaded data.
5. Review Results: Examine the detailed reports and findings generated by the analysis.

For detailed instructions and best practices, please refer to our comprehensive documentation.

MVT integrates with extensive databases of indicators of compromise (IOCs) to scan your device data for potential traces of known spyware and malware:

• Uses IOCs published by Amnesty International, other research groups, and custom sources.
• Applies advanced pattern matching algorithms to identify artifacts matching IOC criteria.
• Supports both public and private IOC lists for comprehensive threat coverage.
• Provides real-time updates to IOC databases to ensure detection of the latest threats.

Data security and privacy are paramount in MVT. We implement industry-leading security measures:

• End-to-End Encryption: All data uploads and analysis processes are encrypted to protect your information.
• Secure Infrastructure: Our platform runs on secure, monitored infrastructure with regular security audits.
• Privacy Protection: We do not store your device data longer than necessary for analysis and reporting.
• Access Controls: Strict access controls ensure only authorized personnel can access your case data.
• Compliance: Our practices align with international standards for data protection and security.

MVT was developed by Amnesty International Security Lab with a strong commitment to protecting civil society and human rights defenders from digital surveillance.

MVT is committed to making advanced mobile forensics accessible to those who need it most. Our pricing structure is designed to support civil society and security professionals:

Special Note: We offer special pricing for human rights organizations, journalists, and civil society groups. Contact us for details on our nonprofit and academic programs.

We offer comprehensive support to help you make the most of MVT's capabilities:

For urgent security concerns, we recommend contacting Amnesty International's Security Lab or Access Now's Digital Security Helpline for expert assistance.

While MVT is a powerful forensic tool, it's important to understand its limitations:

• Not for Self-Assessment: MVT requires expertise in digital forensics and is not designed for end-user self-assessment.
• IOC Limitations: Cannot detect unknown or zero-day spyware that doesn't match known indicators.
• Data Dependency: Analysis quality depends on the completeness and integrity of the acquired device data.
• Platform Evolution: As mobile platforms evolve, some forensic techniques may become less effective over time.
• False Positives/Negatives: Like all security tools, MVT can produce false positives or miss subtle indicators.

If you have specific security concerns about your device or need expert forensic analysis:

1. For Civil Society: Contact Amnesty International's Security Lab for specialized assistance.
2. Global Support: Reach out to Access Now's Digital Security Helpline for expert guidance.
3. Professional Services: Our Enterprise plan includes consulting services for complex cases.
4. Documentation: Review our extensive documentation for detailed usage instructions.

Remember that MVT is a research tool. For critical security situations, always consult with professional security experts who can provide comprehensive assessment and guidance.