How to install and use MVT to check for Pegasus infestation

This tool is not intended for end-user self-assessment and it is designed for IT Security / IT Forensics professionals. It is not like MalwareBytes, etc.

Did you follow the instructions?

https://docs.mvt.re/en/latest/install.html

Dependencies required on macOS:

1. You need to install Xcode (Mac App Store)
2. You need to install Xcode Command Line Utilities via Terminal (sudo xcode-select --install)
3. You need to install Homebrew (https://brew.sh)
4. You need to install the Homebrew packages via Terminal (brew install python3 libusb sqlite3) [libusb only for Android]
5. You need to add "export PATH=$PATH:~/.local/bin" to your .bashrc or .zshrc file
6. You need to install mvt via Terminal (pip3 install mvt)

That's just to get the tooling installed. Now you have to jump through hoops to actually create iTunes backups and scan them with the mvt-ios tool.

Download the STIX2 Pegasus file (https://raw.githubusercontent.com/AmnestyTech/investigations/master/2021-07-18_nso/pegasus.stix2) and put in ~/iOS/malware.stix2 then run the command below:

mvt-ios check-backup --iocs ~/ios/malware.stix2 --output /path/to/iphone/output /path/to/backup

MVT is a forensic research tool intended for technologists and investigators. Using it requires understanding the basics of forensic analysis and using command-line tools. MVT is not intended for end-user self-assessment. If you are concerned with the security of your device please seek expert assistance.

Note: MVT does not scan Mac's only mobile devices.

You're barking up the wrong tree. The Pegasus spyware is only for iPhones and Android phones. It's not for desktop computers.

If you applied the respective Apple Security updates for Big Sur and Catalina, then you shouldn't care because the security holes in the respective operating systems have been plugged. Any infestation has nothing to do — if it is even installed, in the first place.

I'm not asking Apple. I'm asking the support community. Since the software is written by Amnesty International, I suspect it is trustworthy.

This support community is for helping with Apple software and products. If you need help with some third-party product, you'll need to ask them for help.

You would have to ask the people who made the software. Apple has nothing to do with it.

Do you have some reason to trust them?

What leads you to believe the drive is "infested" in the first place?