TLDR InfoSec · ATTACKS & VULNERABILITIES

4 YEAR CAMPAIGN BACKDOORED IPHONES USING POSSIBLY THE MOST ADVANCED EXPLOIT EVER

arstechnica.com4 min read

Summary from the TLDR InfoSec newsletter

Researchers have unveiled new findings surrounding an attack that backdoored iPhones belonging to Kaspersky employees. Operation Triangulation exploited 4 zero days including an undocumented hardware feature which allowed for an unprecedented level of access. The malware was delivered via an iMessage text that kicked off an incredibly complex kill chain that begins with a zero-day in Apple’s TrueType font implementation and includes several other complex techniques.