Operation Triangulation: Zero-Click iPhone Malware

web3d3v.eth · 2023-06-10T03:44:59.000Z

Kaspersky is reporting a zero-click iOS exploit in the wild: Mobile device backups contain a partial copy of the filesystem, including some of the user data and service databases. The timestamps of the files, folders and the database records allow to roughly reconstruct the events happening to the device. The mvt-ios utility produces a sorted timeline of events into a file called “timeline.csv,” similar to a super-timeline used by conventional digital forensic tools. Using this timeline, we were able to identify specific artifacts that indicate the compromise. This allowed to move the research forward, and to reconstruct the general infection sequence:...

Back

Join our TG SubmitDisconnect

Operation Triangulation: Zero-click iPhone malware

by web3d3v.eth70 🥝 • 3y •

schneier.com

Characters remaining: 10,000

comment guidelines