Google security experts uncovered an “indiscriminate” hacking operation that targeted iPhones over a period of at least two years and used websites to implant malicious software to access photos, users’ locations and other data.
In a post on the blog of Google’s Project Zero security taskforce, cyber experts did not name the hacked websites hosting the attacks but estimated they received thousands of visitors a week.
“Simply visiting the hacked site was enough for the exploit server to attack your device, and if it was successful, install a monitoring implant,” said Project Zero’s Ian Beer.
Once installed, the malicious software “primarily focused on stealing files and uploading live location data,” Mr Beer said, adding it had been able to access encrypted messenger apps like Telegram, WhatsApp and iMessage.
Google hangouts and Gmail had also been affected, he added in the post, which provided a detailed breakdown of how the malicious software targeted and exploited iPhone vulnerabilities.
Most of the vulnerabilities targetted were found in the iPhone’s default Safari web browser, Mr Beer said, adding that the Project Zero team had discovered them in almost every operating system from iOS 10 through to the current iOS 12 version.
Once embedded in a user’s iPhone, the malicious software sent back stolen data, including live user location data back to a “command and control server” every 60 seconds.
Mr Beer said Google had informed Apple of the attacks in February, and Apple subsequently released a security patch.
Earlier this month, Apple said it will pay a reward of $1 million to any hacker who can remotely gain full control of an iPhone without the knowledge of its owner.
The company is expanding its “bug bounty” programme – launched in 2016 and which earmarked as much as $200,000 in reward money for uncovering security issues. Starting next month, anyone can participate in the programme that was previously by Apple invite-only.
Long the financial driver of Apple, iPhone revenue was down 12 per cent from last year to $26 billion in the third quarter.
The tech giant sent out invitations on Thursday to a September event at its Silicon Valley campus where it is expected to unveil a new-generation iPhone.
You may be interested
The Address Buhari Could Have Given — a speculative piece by Chimamanda Adichieadmin - October 24, 2020
<!-- The Address Buhari Could Have Given — a speculative piece by Chimamanda Adichie - ElombahNews HomeAnalysisThe Address Buhari Could…
Please return the Oba’s staff of office and shoe — Senator Shehu Sani pleads with hoodlumadmin - October 23, 2020
The palace of Rilwan Akiolu, the Oba of Lagos, was recently overtaken by suspected thugs. According to reports, the thugs…
How to Help Prevent People From Finding Me Online?admin - October 23, 2020
Websites that find people using their names or phone numbers rely on public records for information. Such records include, but…