A LIGHTWEIGHT METHOD TO DETECT POTENTIAL IOS MALWARE

Summary from the TLDR InfoSec newsletter

This blog post discusses a lightweight way to detect potential iOS malware by analyzing the Shutdown.log file stored in sysdiag archives. Anomalies and indicators of malware can be detected by extracting and parsing the log file. In the example presented in the post, through analysis of several Pegasus malware infections, it was discovered that the Shutdown.log file contained traces of infection.