MVT

MVT (Mobile Verification Toolkit) is Amnesty International's forensic tool for detecting traces of commercial spyware like Pegasus, Predator, and other surveillance malware on iOS and Android devices. It gained worldwide attention through the Pegasus Project investigation and has since become the standard tool for journalists, activists, and human rights organizations to verify if their devices have been compromised. MVT analyzes iOS backups and filesystem dumps for known indicators of compromise (IOCs) published by Amnesty's Security Lab, checking SMS messages, browser history, installed profiles, process lists, and application data. For Android, it examines APK installations, SMS messages, and downloads for known malicious artifacts. The tool outputs timeline-based reports showing exactly when compromise indicators appeared. With over 12,000 GitHub stars, MVT represents a critical capability for civil society to detect state-sponsored surveillance.