Tuesday, March 19, 2024
Advertisement
  1. You Are At:
  2. News
  3. Technology
  4. Unknown malware exploits iMessages on iPhones to enable spyware attack on users

Unknown malware exploits iMessages on iPhones to enable spyware attack on users

During the surveillance of their corporate Wi-Fi network, experts stumbled upon a campaign that specifically targeted iOS devices. Further investigation revealed that the threat actor had been focusing on the iPhones of numerous company employees.

IANS Reported By: IANS New Delhi Published on: June 02, 2023 18:05 IST
iPhone, malware
Image Source : PIXABAY Unknown malware exploits iMessage on iPhones to enable spyware attacks on users

Hackers are targeting iPhones with previously unknown malware, via iMessage to, gain complete control over the iOS device and spy on users, cyber-security researchers warned on Friday. Cybersecurity company Kaspersky discovered the mobile Advanced Persistent Threat (APT) campaign targeting iOS devices with previously unknown malware.

Dubbed as 'Operation Triangulation', the ongoing campaign distributes zero-click exploits via iMessage to run malware gaining complete control over the device and user data, with the final goal to "hiddenly spy on users".

The experts uncovered the campaign while monitoring the network traffic of its corporate Wi-Fi network. Upon further analysis, researchers discovered the threat actor has been targeting iOS devices of dozens of company employees. This is how the new malware campaign works.

The victim receives a message via iMessage with an attachment containing a zero-click exploit. Without any further interaction, the message triggers a vulnerability that leads to code execution for privilege escalation and provides full control over the infected device. Once the attacker successfully establishes its presence in the device, the message is automatically deleted.

"Further, the spyware quietly transmitted private information to remote servers: including microphone recordings, photos from instant messengers, geolocation and data about a number of other activities of the owner of the infected device," the team noted.

The attackers could only access data stored on the infected devices. Although not certain, it is believed that the attack was not targeted specifically at Kaspersky.

ALSO READ: Mark Zuckerberg unveils Meta Quest 3 amidst Apple VR rumors

"As APT actors are constantly evolving their tactics and searching for new weaknesses to exploit, businesses must prioritise security of their systems.

"This involves prioritising employee education and awareness, and providing them with the latest threat intelligence and tools to effectively recognize and defend against potential threats," said Igor Kuznetsov, head of the EEMEA unit at Kaspersky Global Research and Analysis Team (GReAT).

ALSO READ: Elon Musk is not the richest person in the world anymore

"Our investigation of the 'Triangulation' operation continues. We expect further details on it to be shared soon, as there can be targets of this spy operation outside Kaspersky," he added.

In order to avoid falling victim to a targeted attack, update third-party software as soon as possible and do so regularly, the researchers advised.

 

Advertisement

Read all the Breaking News Live on indiatvnews.com and Get Latest English News & Updates from Technology

Advertisement
Advertisement
Advertisement
Advertisement