Researchers: Websites infected iPhones with spyware

Researchers: Websites infected iPhones with spyware

Posted:

By FRANK BAJAK
AP Cybersecurity Writer


Suspected nation-state hackers used malware-laden websites to infect iPhones with spyware in what security researchers are calling the worst general security failure yet affecting the Apple devices.

Announced late Thursday by Google researchers, the vulnerabilities were quietly fixed by Apple in February but only after thousands of iPhone users were believed exposed over more than two years.

The researchers did not say who was behind the cyberespionage or what population was targeted, but experts said the operation had the hallmarks of a nation-state effort.

Sensitive data accessed by the spyware included WhatsApp, iMessage and Telegram text messages, Gmail, photos, contacts and real-time location - essentially all the databases on the victim's phone. While the messaging applications may encrypt data in transit, it is readable at rest on iPhones.

"This is definitely the most serious iPhone hacking incident that's ever been brought to public attention, both because of the indiscriminate targeting and the amount of data compromised by the implant," said former U.S. government hacker Jake Williams, the president of Rendition Security.

Google researcher Ian Beer said in a blog posted late Thursday that the discovery should dispel any notion that it costs a million dollars to successfully hack an iPhone. That is a reference to the case of a United Arab Emirates dissident whose iPhone was infected in 2016 with so-called zero-day exploits, which have been known to fetch such high prices.

"Zero day" refers to the fact that such exploits are unknown to the developers of the affected software, and thus they have had no time to develop patches to fix it.

The discovery was made by Google researchers at Project Zero, which hunts security vulnerabilities in software and microprocessor firmware, independent of their manufacturer, that criminals, state-sponsored hackers and intelligence agencies use.

"This should serve as a wake-up call to folks," said Will Strafach, a mobile security expert with Sudo Security. "Anyone on any platform could potentially get infected with malware."

Beer said his team estimated that the infected websites used in the "indiscriminate watering hole attacks" receive thousands of visitors per week. He said the team collected five separate chains of exploits covering Apple's iOS system as far back as version 10, released in 2016.

Apple did not immediately respond to a request for comment on why it did not detect the vulnerabilities on its own and if it can assure users that such a general attack could not happen again. Privacy assurance is central to the Apple brand.

Neither Google nor Beer responded immediately to questions about the attackers or the targets, though Beer provided a hint in his blog post: "To be targeted might mean simply being born in a certain geographic region or being part of a certain ethnic group."

Williams, of Rendition Security, said the spyware implant wasn't written to transmit stolen data securely, suggesting an authoritarian state was behind it. He speculated that it was likely used to target political dissidents.

(Copyright 2019 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.)

  • Top StoriesMore>>

  • US police assess rise in threat tips after 3 mass killings

    US police assess rise in threat tips after 3 mass killings

    Saturday, September 21 2019 10:56 AM EDT2019-09-21 14:56:29 GMT
    Sunday, September 22 2019 12:36 PM EDT2019-09-22 16:36:26 GMT
    (Long Beach Police Department via AP, File). FILE - This undated file photo released by the Long Beach, Calif., Police Department shows weapons and ammunition seized from a cook at a Los Angeles-area hotel who allegedly threatened a mass shooting. Rodo...(Long Beach Police Department via AP, File). FILE - This undated file photo released by the Long Beach, Calif., Police Department shows weapons and ammunition seized from a cook at a Los Angeles-area hotel who allegedly threatened a mass shooting. Rodo...
    (Long Beach Police Department via AP, File). FILE - This undated file photo released by the Long Beach, Calif., Police Department shows weapons and ammunition seized from a cook at a Los Angeles-area hotel who allegedly threatened a mass shooting. Rodo...(Long Beach Police Department via AP, File). FILE - This undated file photo released by the Long Beach, Calif., Police Department shows weapons and ammunition seized from a cook at a Los Angeles-area hotel who allegedly threatened a mass shooting. Rodo...
    A big rise in mass shooting tips poses challenge for police after gunmen kill 34 in California, Ohio and Texas.
    A big rise in mass shooting tips poses challenge for police after gunmen kill 34 in California, Ohio and Texas.
  • Fifth death linked to storm that walloped Houston area

    Fifth death linked to storm that walloped Houston area

    Saturday, September 21 2019 11:56 AM EDT2019-09-21 15:56:47 GMT
    Sunday, September 22 2019 11:36 AM EDT2019-09-22 15:36:59 GMT
    (Jon Shapley/Houston Chronicle via AP). A truck drives through a flooded highway as flooding from the remnants of Tropical Storm Imelda continues in Southeast Texas on Friday, Sept. 20, 2019, in Mauriceville, Texas.(Jon Shapley/Houston Chronicle via AP). A truck drives through a flooded highway as flooding from the remnants of Tropical Storm Imelda continues in Southeast Texas on Friday, Sept. 20, 2019, in Mauriceville, Texas.
    (Jon Shapley/Houston Chronicle via AP). A truck drives through a flooded highway as flooding from the remnants of Tropical Storm Imelda continues in Southeast Texas on Friday, Sept. 20, 2019, in Mauriceville, Texas.(Jon Shapley/Houston Chronicle via AP). A truck drives through a flooded highway as flooding from the remnants of Tropical Storm Imelda continues in Southeast Texas on Friday, Sept. 20, 2019, in Mauriceville, Texas.
    Authorities in Texas have attributed a fifth death to the remnants of Tropical Storm Imelda, which caused widespread flooding in southeastern Texas and parts of Louisiana.
    Authorities in Texas have attributed a fifth death to the remnants of Tropical Storm Imelda, which caused widespread flooding in southeastern Texas and parts of Louisiana.
  • Walmart to quit selling e-cigarettes amid vaping backlash

    Walmart to quit selling e-cigarettes amid vaping backlash

    Friday, September 20 2019 1:56 PM EDT2019-09-20 17:56:24 GMT
    Sunday, September 22 2019 11:36 AM EDT2019-09-22 15:36:30 GMT
    Walmart to stop selling electronic cigarettes at its stores in the wake of string of deaths related to vaping.
    Walmart to stop selling electronic cigarettes at its stores in the wake of string of deaths related to vaping.
Powered by Frankly
All content © Copyright 2000 - 2019 RAMAR. All Rights Reserved.
For more information on this site, please read our Privacy Policy, and Terms of Service, and Ad Choices.