Further investigation by our team showed that several dozen iPhones of senior employees were infected with new, extremely technologically sophisticated spyware we’ve dubbed “Triangulation”.ĭue to the closed nature of iOS, there are no (and cannot be any) standard operating-system tools for detecting and removing this spyware on infected smartphones.

The spyware they quietly transmits private information to remote servers: microphone recordings, photos from instant messengers, geolocation, and data about a number of other activities of the owner of the infected device.ĭespite the attack being carried out as discreetly as possible, the infection was detected by the Kaspersky Unified Monitoring and Analysis Platform (KUMA) – a native SIEM solution for security information and event management the system detected an anomaly in our network coming from Apple devices. The deployment of the spyware is completely hidden and requires no action from the user. The attack is carried out using an invisible iMessage with a malicious attachment, which, using a number of vulnerabilities in the iOS operating system, is executed on a device and installs spyware. The purpose of the attack is the inconspicuous placing of spyware into the iPhones of employees of at least our company – both middle and top management. Our experts have discovered an extremely complex, professional targeted cyberattack that uses Apple’s mobile devices. I’ve some big news about a cyber-incident we’ve uncovered…

Kaspersky mobile