Security News > 2020 > March > Emerging APT Mounts Mass iPhone Surveillance Campaign

A recently discovered, mass-targeted watering-hole campaign has been aiming at Apple iPhone users in Hong Kong - infecting website visitors with a newly developed custom surveillance malware.

Despite the deep level of surveillance afforded by the malware, researchers said that the campaign doesn't appear to be a targeted effort, apart from focusing on Hong Kong residents.

Now, the exploits used targets a variety of iPhone models, from the iPhone 6S up to the iPhone X. "The actor was actively changing implant components," according to the Kaspersky analysis, which noted that the first observed version of one of the exploits resembled a proof of concept.

The iOS effort appears to be connected to a previous, similar 2019 campaign aimed at Android users, according to researchers at both firms.

The new iOS campaign and the older Android campaign are linked via their infrastructure, according to the Trend Micro analysis: The Android download and C2 servers used the same domain name as one of the watering holes used by the iOS component.

News URL

https://threatpost.com/emerging-apt-mounts-mass-iphone-surveillance-campaign/154192/