“On the face of it, these iOS vulnerabilities are extremely worrying, but digging deeper it appears to be a largely targeted attack,” Wright says. However, now we know more about the attack, it’s clear it is very targeted against a particular group of people. As security researcher Sean Wright told me, they could be chained together to allow an attacker to target iPhones and iPads remotely.

Make no mistake-the issues fixed in iOS 16.5.1 are serious. How Worried Should I Be About The Flaws Fixed In iOS 16.5.1? “Further investigation by our team showed that several dozen iPhones of senior employees were infected with new, extremely technologically sophisticated spyware we’ve dubbed ‘Triangulation’.”įor a deeper dive into the spyware when it was first discovered, check out this article by my Straight Talking Cyber and Forbes colleague Davey Winder. “Despite the attack being carried out as discreetly as possible, the infection was detected by the Kaspersky Unified Monitoring and Analysis Platform (KUMA) – a native SIEM solution for security information and event management in the beginning of the year the system detected an anomaly in our network coming from Apple devices.

The spyware then quietly transmits private information to remote servers: microphone recordings, photos from instant messengers, geolocation, and data about a number of other activities of the owner of the infected device. “The deployment of the spyware is completely hidden and requires no action from the user.

Kaspersky’s blog describes how the attack patched in iOS 16.5.1 is carried out using an invisible iMessage with a malicious attachment to deliver “Triangulation spyware.” Using “a number of vulnerabilities” in the iOS operating system, it is executed on a device and installs spyware, the security outfit said.

Dig Out! download the new for ios