Recent cybersecurity research has raised concerns about potential hacking activities targeting iPhones operating on outdated iOS versions, with a focus on threats from Russian intelligence and Chinese cybercriminals. Apple is urging users to promptly update their devices in response to these findings.
The research highlights the utilization of hacking tools known as DarkSword and Coruna by cyber attackers to exploit vulnerabilities in older iOS versions, enabling them to extract sensitive data such as Wi-Fi passwords, text messages, call history, location details, browser activities, and various databases. According to a statement from cybersecurity firm iVerify, DarkSword is primarily used for surveillance and data gathering purposes.
Reports from cybersecurity company Lookout and Google indicate that hackers are leveraging exploit kits to access personal information of users. Apple’s spokesperson, Sarah O’Rourke, emphasized the importance of keeping software up to date for enhanced device security.
Notably, the research did not specify any breaches affecting American users but identified instances of Russian intelligence targeting individuals in Ukraine, Chinese cryptocurrency users, and residents of Saudi Arabia, Turkey, and Malaysia. John Scott-Railton, a senior researcher at the University of Toronto’s Citizen Lab, warned that individuals worldwide remain vulnerable to attacks on older iOS systems, stressing the ease with which such attacks can occur.
Furthermore, it is revealed that a significant percentage of iPhone users are still operating on iOS versions 18 or older, making them susceptible to hacking when visiting compromised websites. The exploitation of web traffic processing by tools like DarkSword enables the collection of personal data.
Google has reported instances where Chinese cybercriminals have used hacking tools to create fake finance-related websites to gather cryptocurrency. Additionally, various commercial surveillance vendors and suspected state-sponsored actors have been identified employing DarkSword in distinct campaigns.
Rocky Cole, the chief operating officer of iVerify, emphasized that while iPhones are generally perceived as secure devices, there is a misconception about their vulnerability to attacks. He highlighted the need for improved visibility into potential threats and cautioned that such attacks may be more widespread than commonly believed.
In conclusion, the escalating threat landscape underscores the critical importance of updating iOS devices to mitigate security risks and safeguard personal information. Users are encouraged to stay informed and proactive in maintaining the security of their devices.