If you’re an iPhone user, then you must be alert and careful before what you click on. There’s a new cyber threat found via Kaspersky Internet Security that targets iPhone devices and takes complete control of the device.

One of the biggest cybersecurity and antivirus software companies ‘Kaspersky Internet Security’ recently found a cybersecurity threat called ‘Triangulation’. This threat targets old versions of iPhones, such as iOS 15.7, and gains complete access via the iMessage app.

iMessage App at Risk kaspersky internet security

The iMessage app contains a malicious attachment that automatically installs spyware & takes complete control over the iPhone and its data.

As per the Kaspersky report, they just uncovered a cybersecurity threat. It is extremely complex & targets iPhone devices via the iMessage app by auto-installing spyware and taking complete control of it.

Operation Triangulation

Also, Kaspersky CEO Eugene Kaspersky tweeted about this iOS attack, and it is called Triangulation. He said, “Our investigation of this Triangulation continues, and we expect further details to be shared soon.”

In the Kaspersky report, they said that their team of iPhone users recognized this malware attack. This threat is quietly entered via the iMessage app and gets access to microphones, cameras, photos, messages, geolocation, and other sensitive data. 

He also said that this threat had been neutralized and complete vulnerability details had been sent to the Apple company.

Further investigation shows that dozens of iPhone devices were infected with this attack.

The Zero-Click Attack kaspersky internet security

Getting this threat inside the iPhone device is easier; the user will receive a message on the iMessage app with an attachment. When the user opens the message, a threat will automatically go inside the device and take complete control over the device. Once the hacker gets complete control, the message with the attachment will automatically be selected from the device.

On Friday, Kaspersky also released tools to identify if the device is infected. 

One of the clear indications or ideas to check this Triangulation attack on iPhone devices was that it turned off the iOS update and didn’t allow users to update their iOS version. 

The CEO of Kaspersky noticed that turning off the iMessage app can prevent iOS devices from being attacked. iOS 16 seems safe from this Triangulation threat, and there are low chances but not guaranteed.

Apple iOS 16.3 Updates

Furthermore, Apple released major updates that fixed vulnerabilities with iOS 16.3 and MacOS 13.2 supported iPhone, iPad, and Mac devices.

Suggested:

What Security features must have in Good Antivirus?

How To Remove Malware From Computer?

The post Kaspersky Finds Cybersecurity Threat that Targets iPhone Users via iMessage to Gain Access appeared first on Tricky Enough.

Here is the list of a few infected applications:

• L.POINT with L.PAY – 10 million downloads
• Pikicast – 5 million downloads
• Swipe Brick Breaker – 10 million downloads
• Money Manager Expense & Budget – 10 million downloads
• LIVE Score, Real-Time Score – 5 million downloads
• GOM Player – 5 million downloads
• Compass 9: Smart Compass – 1 million downloads
• and more

McFee’s research team discovered this malware, “Goldoson.” According to them, the malware collected data from different resources, including the user’s GPS location, WiFi-connected devices, Bluetooth devices, and installed apps.

Moreover, it could do ad fraud if a user clicks on any ad without taking consent from the user.

Android Malware Steals Data from Devices

If a user downloads and installs any application containing Goldoson, its library automatically logs the device and captures its configuration using a remote private server.

The configuration includes all the parameters Android malware can run on the device for ad clicking and data stealing.

Every two days, it collects data by activating the function of data collection. Then, it sends the C2 server the list of geographical locations, installed apps, and MAC addresses of the devices connected via WiFi, Bluetooth, etc.

The data amount collected by the malware depended on the permissions provided by the user. For example, Devices with Android 11 or above provide high-level protection for data. So, they might be less affected compared to the lower versions.

However, McAfee also found that in recent OS versions, users gave malware enough permission to collect sensitive data of their devices in 10% of apps. Along with that, The function of ad-clicking is activated using a customized HTML code, various URL visits, WebView, and generating ad revenues.

Goldoson libraries are removed from the Google Play app. But, MaAfee warned the users to always check twice before allowing permissions to any application because the risk is still there.

Suggested:

How To Remove Malware From Computer.

The post “Goldoson,” an Android Malware, Invade 60 Applications on Google Play appeared first on Tricky Enough.