Share

Google reveals years-long 'indiscriminate' iPhone hack

Google security experts uncovered an "indiscriminate" hacking operation that targeted iPhones over a period of at least two years and used websites to implant malicious software to access photos, user locations and other data.

In a post on Thursday on the blog of Google's Project Zero security taskforce, cyber experts did not name the hacked websites hosting the attacks, but estimated they received thousands of visitors a week.

    "Simply visiting the hacked site was enough for the exploit server to attack your device, and if it was successful, install a monitoring implant," said Project Zero's Ian Beer.

    Once installed, the malicious software "primarily focused on stealing files and uploading live location data," Beer said, adding it had been able to access encrypted messenger apps like Telegram, WhatsApp and iMessage.

    Google hangouts and Gmail had also been affected, he added in the post, which provided a detailed breakdown of how the malicious software targeted and exploited iPhone vulnerabilities.

    Safari web browser 

    Most of the vulnerabilities targeted were found in the iPhone's default Safari web browser, Beer said, adding that the Project Zero team had discovered them in almost every operating system from iOS 10 through to the current iOS 12 version.

    Once embedded in a user's iPhone, the malicious software sent back stolen data, including live user location data back to a "command and control server" every 60 seconds.

    Beer said Google had informed Apple of the attacks in February, and Apple subsequently released a security patch for the iOS 12.1.

    Long the driver of Apple's money-making machine, iPhone revenue overall was down 12% from last year to $26bn.

    The tech giant sent out invitations on Thursday to a September event at its Silicon Valley campus where it is expected to unveil a new-generation iPhone.

    We live in a world where facts and fiction get blurred
    Who we choose to trust can have a profound impact on our lives. Join thousands of devoted South Africans who look to News24 to bring them news they can trust every day. As we celebrate 25 years, become a News24 subscriber as we strive to keep you informed, inspired and empowered.
    Join News24 today
    heading
    description
    username
    Show Comments ()
    Rand - Dollar
    19.02
    -0.6%
    Rand - Pound
    24.01
    -0.5%
    Rand - Euro
    20.53
    -0.3%
    Rand - Aus dollar
    12.35
    -0.0%
    Rand - Yen
    0.13
    -0.6%
    Platinum
    900.40
    +0.4%
    Palladium
    998.40
    -0.3%
    Gold
    2,210.05
    +0.7%
    Silver
    24.65
    +0.0%
    Brent Crude
    86.09
    -0.2%
    Top 40
    68,079
    +0.6%
    All Share
    74,269
    +0.5%
    Resource 10
    56,875
    +2.2%
    Industrial 25
    103,593
    +0.3%
    Financial 15
    16,463
    -0.4%
    All JSE data delayed by at least 15 minutes Iress logo
    Company Snapshot
    Editorial feedback and complaints

    Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

    LEARN MORE
    Government tenders

    Find public sector tender opportunities in South Africa here.

    Government tenders
    This portal provides access to information on all tenders made by all public sector organisations in all spheres of government.
    Browse tenders