The apps use an official Apple method intended for companies to install internal apps on iPhones used by employees. When ISP involvement is not possible, applications are masqueraded as messaging applications. We believe this is the reason why most of the applications masqueraded as mobile carrier applications. Once disabled, the attacker would send a malicious link via SMS asking the target to install an application to recover their data connectivity. In some cases, we believe the actors worked with the target’s ISP to disable the target’s mobile data connectivity. However, the company did come up with a reasonably clever way to do this. The attacks are not as dangerous as those used by NSO’s Pegasus, as the RCS ones require iPhone owners to be tricked into clicking a link. Today, alongside Google’s Project Zero, we are detailing capabilities we attribute to RCS Labs, an Italian vendor that uses a combination of tactics, including atypical drive-by downloads as initial infection vectors, to target mobile users on both iOS and Android. TAG is actively tracking more than 30 vendors with varying levels of sophistication and public exposure selling exploits or surveillance capabilities to government-backed actors. Seven of the nine zero-day vulnerabilities our Threat Analysis Group discovered in 2021 fall into this category: developed by commercial providers and sold to and used by government-backed actors. Google said that it has for years been tracking the activities of commercial spyware vendors, with RCS Lab among them.
However, Apple has patched all six of the exploits used in different versions of iOS (see below), so keeping your iPhone up to date will protect it from the hacking tools …ĭetails of the spyware were revealed by security researchers in Google’s Threat Analysis Group (TAG), whose mission is to detect and counter “targeted and government-backed hacking.” The hacking tool used a variety of exploits to allow the firm’s customers to spy on private messages, contacts, and passwords. IPhone hacks developed by Italian company RCS Lab have been used by law enforcement agencies in Europe, according to a new Google report.
0 kommentar(er)
