In one of the biggest attacks against iPhone users, Google security researchers have discovered several hacked websites that used security flaws in iPhones to attack users who visited these websites.
In a blog post, researchers working in Google’s Project Zero team said that after they reported their findings to Apple, the Cupertino-based tech giant patched the vulnerabilities.
The malicious websites may have compromised personal files, messages, and real time location data of iPhone users.
“Earlier this year, Google’s Threat Analysis Group (TAG) discovered a small collection of hacked websites. The hacked sites were being used in indiscriminate watering hole attacks against their visitors, using iPhone 0-day,” said Ian Beer, Project Zero.
There was no target discrimination as simply visiting the hacked site was enough for the exploit server to attack the iPhone, and if it was successful, install a monitoring implant.
“We estimate that these sites receive thousands of visitors per week,” said the Google blog post.
The researchers were able to collect five separate, complete and unique iPhone exploit chains, covering almost every version from iOS 10 through to the latest version of iOS 12.
“This indicated a group making a sustained effort to hack the users of iPhones in certain communities over a period of at least two years,” said Beer.
“I will not get into a discussion of whether these exploits cost $1 million, $2 million, or $20 million. I will instead suggest that all of those price tags seem low for the capability to target and monitor the private activities of entire populations in real time,” the researcher noted.
The websites delivered their malware indiscriminately and were operational for years, said Google.
Apple was yet to issue a comment on Google’s blog post.
Pingback: KIU-Library/
Pingback: yourfishguide.com mahi mahi fish
Pingback: thepoc
Pingback: Geen Effect
Pingback: 마사지사이트
Pingback: 바카라
Pingback: british dragon pharmaceuticals authentication
Pingback: homework helper
Pingback: 안전놀이터
Pingback: nha cai so de
Pingback: click here
Pingback: lortab without prescription online
Pingback: japanese real doll buy cheap
Pingback: fake rolex
Pingback: human hair wigs
Pingback: бинанс
Pingback: dumps hight balance
Pingback: en iyi canlı bahis siteleri
Pingback: thingiverse newest
Pingback: design home
Pingback: buy xanax online
Pingback: Pair programming tool
Pingback: wow slot
Pingback: audemars replica piguet offshore panda
Pingback: cam girls
Pingback: sbobet
Pingback: glock pistols buds guns
Pingback: สินเชื่อโฉนดที่ดิน
Pingback: one up mushrooms
Pingback: sig mcx pistol for sale
Pingback: Creative booth design
Pingback: Magic Mushroom Store USA
Pingback: brainsclub
Pingback: 토렌트
Pingback: dating site