Highly Targeted Attack Infects Only 13 iPhones in India

guest · Jul 13, 2018

Highly Targeted Attack Infects Only 13 iPhones in India
July 13, 2018
https://www.bleepingcomputer.com/ne...eted-attack-infects-only-13-iphones-in-india/

Mysterious malware has infected only 13 iPhones in India in what appears a highly targeted operation.

The attack has been carried out using something called an MDM, a mobile device management server that's normally used in enterprise environments for side-loading custom apps to employees, apps that aren't or can't be made available through the official iOS App Store due to their sensitive nature.
Attacker located in India but tried to pose as Russian
"This campaign is of note since the malware goes to great lengths to replace specific mobile apps for data interception," researchers said.

Indicators of compromise (IOCs) and other forensic data regarding this highly targeted attack are available in the Cisco Talos research.
Click to expand...

guest · Jul 25, 2018

iPhone Hacking Campaign Using MDM Software Is Broader Than Previously Known
July 25, 2018
https://thehackernews.com/2018/07/mdm-software-hack-iphone.html

India-linked highly targeted mobile malware campaign, first unveiled two weeks ago, has been found to be part of a broader campaign targeting multiple platforms, including windows devices and possibly Android as well.

Apart from distributing modified Telegram and WhatsApp apps with malicious functionalities, the newly-identified server also distributes modified versions of Safari browser and IMO video chatting app to steal more personal information on victims.

At this time, it's unclear who is behind the campaign, who was targeted in the campaign, and what were the motives behind the attack, but the technical elements suggest the attackers are operating from India, and are well-funded.

The best way to avoid being a victim to such attacks is to always download apps from official app store.
Click to expand...

guest · Sep 6, 2018

mood said: ↑

Highly Targeted Attack Infects Only 13 iPhones in India
July 13, 2018
https://www.bleepingcomputer.com/ne...eted-attack-infects-only-13-iphones-in-india/
Click to expand...

Attackers Abuse Age Restrictions to Hide Apps on iOS Devices
September 06, 2018
https://www.securityweek.com/attackers-abuse-age-restrictions-hide-apps-ios-devices

The security researchers now reveal that the attackers abused the MDM solution to control the victims’ devices and deploy a new profile onto them. Next, the actors leveraged the age rating restriction functionality in iOS to hide the legitimate apps.

The age ratings for WhatsApp and Telegram are 12-plus and 17-plus, respectively, and the actors set the age rating limit to 9-plus. Thus, the legitimate apps would no longer be shown on the device and the victim was only able to access the rogue variants instead.

“The app still exists on the device, however, the user will not be able to interact with it, even if the user searches for the app using the search function on the iOS device. It simply does not open. All mobile device users should be aware of these attack methods as to prevent attackers from gaining control of their phones through an MDM,” Talos explains.

“It's important to note here that there is no malicious malware, vulnerability or zero-day used to enroll the phone within the MDM. It is a legitimate method of device administration that is used within enterprises throughout the world. [...]"
Click to expand...

Log in or Sign up

Highly Targeted Attack Infects Only 13 iPhones in India

guest Guest

guest Guest

guest Guest

Log in or Sign up

Highly Targeted Attack Infects Only 13 iPhones in India

guest Guest

guest Guest

guest Guest

Useful Searches