Google: hackers have put ‘monitoring implants’ in iPhones for years

[BobbyD]

Might be of interest to anybody using an Apple phone:

Visiting hacked sites was enough for server to gather users’ images and contacts

An unprecedented iPhone hacking operation, which attacked “thousands of users a week” until it was disrupted in January, has been revealed by researchers at Google’s external security team.

The operation, which lasted two and a half years, used a small collection of hacked websites to deliver malware on to the iPhones of visitors. Users were compromised simply by visiting the sites: no interaction was necessary, and some of the methods used by the hackers affected even fully up-to-date phones.

Once hacked, the user’s deepest secrets were exposed to the attackers. Their location was uploaded every minute; their device’s keychain, containing all their passwords, was uploaded, as were their chat histories on popular apps including WhatsApp, Telegram and iMessage, their address book, and their Gmail database.

- https://www.theguardian.com/technology/ ... oogle-says

[Slarti]

Not sure how you'd do this but check if your logs/history show if your phone has connected to http://x.x.x.x to see if you've been infected.

If you turn your phone off and then on again, that removes the infection. Apparently.


Slarti

[BobbyD]

Not sure how you'd do this but check if your logs/history show if your phone has connected to http://x.x.x.x to see if you've been infected.

If you turn your phone off and then on again, that removes the infection. Apparently.


Slarti

Only scanned it as I don't use an iphone, but the G article said something along the lines of that whilst turning it on and off again reset it hackers had had access to sufficient information in the meantime that prolonged compromisation would not have been challenging.

[Garless]

Proves the old rule, never go to dubious web sites suggested by email or even adverts on sites that depend on advertising revenue to survive, and that includes some main stream media.

[Slarti]

Proves the old rule, never go to dubious web sites suggested by email or even adverts on sites that depend on advertising revenue to survive, and that includes some main stream media.

As I don't think that the websites in question have been specified, I don't know how you would that they were "dubious" websites.

All mainstream advertising media is a risk and, by experience, you you don't need to click on anything for some of it.

Slarti