[ad_1]
Apple has issued a new spyware warning after it found that iPhone users in 92 countries were targeted by an attack. Apple users were informed about the attack via a notification email seen by Reuters.
In India and 91 other countries, victims of spyware attacks were told that an adversary had attempted to “remotely compromise their iPhone.”
“Apple has detected that you are the target of a mercenary spyware attack that attempts to remotely compromise the iPhone associated with your Apple ID -xxx-,” the alert reads.
“This attack may be specifically targeting you because of who you are or what you do. Although it is never possible to detect such attacks with certainty, , Apple has great confidence in this warning, so please take it seriously.”
A new iPhone attack appears to have been aimed at installing malicious software on the device to spy on users’ data and location information. According to an email sent by the iPhone maker, Apple has sent out such emails before and has issued multiple warnings to more than 150 countries starting in 2021.
Apple has not disclosed the origin of the attack, but spyware attacks are typical of nation-state actors. In 2021, Apple sued the Israeli company NSO Group for its involvement in attacks on iPhone users.
Why Apple Issues Regulatory iPhone Updates
In recent years, Apple has been issuing more and more iOS updates to address holes that could have been exploited by spyware attacks. Some of these come as emergency security updates, especially when iPhone flaws are already being used in attacks.
Spyware attacks are scary because the malware can be delivered in a so-called zero-click attack, which requires no interaction from the iPhone user. One example is malicious images that can be sent via iMessage or WhatsApp.
A successful iPhone spyware attack like this can give the attacker complete control of the device. Attackers can see everything on her iPhone screen, allowing them to eavesdrop on calls, read emails, and even access apps like her WhatsApp and Signal.
New iPhone Spyware Warning – What to Do
As worrying as it may sound, spyware attacks target only a specific subset of users, typically journalists, political dissidents, government officials, and companies operating in a specific field. If this is the case, Apple has introduced a lockdown mode that can be used on his iPhone. Your iPhone will be less functional, but if you fall into this group and may be at risk, it’s worth it.
“The average iPhone user doesn’t have much to worry about, as these are likely highly targeted attacks against specific people,” said Sean Wright, head of application security at Featurespace. Masu.
Still, he recommends that all iPhone users apply security best practices. “Make sure you have the latest updates, only install apps from trusted sources, and apply some level of scrutiny to those apps, including checking permissions.”
Other tools, such as VPNs, “may have limited benefits,” Wright says. “It largely depends on where the attack comes from and how the new spyware works, for example whether it discards data before network traffic is sent or received.”
Spyware has increasingly targeted iPhone users in recent years, with notable versions including Pegasus and more recently Reign.
Signs that your iPhone may be targeted by spyware include a slow device, rapid battery drain, and overheating. Apart from changes in the way your iPhone operates, an orange or green dot can also indicate that your device has been hijacked. Apple shows an orange dot when the microphone is in use and a green dot when the camera is on. This may be legitimate if you’re making phone calls or video calls, but if your iPhone isn’t in use, you should look into it as soon as possible.
If you suspect that you have spyware on your iPhone, sometimes turning off your iPhone can temporarily suspend the malware.
If you receive a warning from Apple, contact Amnesty International’s Security Lab. Amnesty International provides digital forensic support to human rights defenders, activists, journalists and civil society members at risk.
A notice on Amnesty International’s website says: “If you are a member of civil society and have received Apple’s notice, you can contact us using our help form to request forensic support.” It’s dark.
If you find spyware, experts recommend first backing up your iPhone to save evidence before taking any action.
experts give their opinions
More experts are weighing in on Apple’s latest spyware alert, with Javad Malik, Security Awareness Lead at KnowBe4 calling it out: Apple’s notice is “particularly concerning given the scale and sophistication of this campaign.”
“When a company like Apple, known for its robust security practices, issues an alert to 92 countries, it highlights not just the sophistication of the attackers, but their audacity,” he said. Masu.
Malik says the phrase “mercenary spyware attack” is key. “This is not about casting a wide net in hopes of catching unsuspecting users. It’s about targeting precisely using the tools currently available to the highest bidder, regardless of motivation. It’s a transparent and sharp spear.
For this reason, Malik says it’s especially important for people in positions of influence or who have access to sensitive information to be vigilant about digital security. “Apple’s proactive stance in notifying affected users and the broader public is commendable.”
But Brian Higgins, a security expert at Comparitech, believes the iPhone maker should have provided more assistance to affected users. “Given how individual targets have been affected in previous incidents, it’s a pretty disappointing profit shift for Apple to direct you to a third-party, non-profit security helpline. If you own a vulnerable platform, They’ll think, “I’m going to offer to help.”
Apply iOS updates to combat spyware
Overall, all iPhone users should make sure their iOS software is up to date. The latest version is iOS 17.4.1. Apple may also release new iOS updates that fix the holes used in this latest spyware attack. Or, the iPhone maker may have already applied a patch.
—
Updated April 12th at 7:30 a.m. ET. This article was first published on 04/11 at 7:31am EST. Updated to include more information and expert analysis on spyware detection and mitigation.
follow me twitter Or LinkedIn.
[ad_2]
Source link