“This can only be done by resetting infected iPhones to factory settings, installing the latest version of the operating system and the entire user environment from scratch. “Due to the peculiarities of blocking iOS updates on infected devices, we have not yet found an effective way to remove spyware without losing user data,” CEO Eugene Kaspersky explains on his blog. The initial message is then deleted along with the attachment, and the users are none the wiser as all of these steps have occurred in the background. Once the iPhone has been exploited, a final payload is downloaded with a fully-functional advanced persistent threat (APT) platform. That message then triggers a vulnerability that leads to code execution, regardless of whether or not the user interacts with the message.Īt this point, the code begins downloading additional stages from a command-and-control (C&C) server, which installs even more iOS exploits for privilege escalation.
First, the iPhone user receives an invisible iMessage with a malicious attachment which contains the exploit.
According to Kaspersky, the spyware can infect iPhones without any action from the user.
0 kommentar(er)
