Why You Should Update Your iPhone Right Now
by Sarah Jacobsson Purewal
Review by Charles Mohapel
CNET.com, Citizen Lab.org, Lookout.com, Apple.com News ISBN/ITEM#: CM160826IPHONE
Date: 26 August 2016
If you own an iPhone 4s or later, iPad 2or later, or iPod touch (5th generation) or later, you need to update to iOS 9.3.5 IMMEDIATELY! Three separate zero-day vulnerabilities dubbed "Trident" by mobile security firm Lookout form an "attack chain" capable of breaking through Apple's (relatively) secure platform.
Apple has just released a security update in response to a malware threat that turns your phone into a pocket spy.
If you have an iPhone, you need to download the latest iOS update right now.
Apple released the "important security update" in response to an active malware threat that can be used to read texts and email, record calls (including WhatsApp and Viber calls), track your location, and turn on your phone's camera and microphone.
If that sounds terrifyingly invasive, that's because it is. The threat, dubbed "Trident" by mobile security firm Lookout, exploits three zero-day vulnerabilities in iOS 9 to form an "attack chain" that can break through Apple's (relatively) secure platform. According to University of Toronto's Citizen Lab, Trident is used in a spyware product developed by Israel-based "cyber war" company NSO Group (which is reportedly owned by an American venture capital firm).
Citizen Lab and Lookout became aware of the issue when links containing the Trident exploit and the spyware were sent to Ahmed Mansoor, a human rights defender based in the United Arab Emirates. Mansoor did not click on the links and instead forwarded the emails to Citizen Lab, but had he clicked on the links, his phone would have been remotely jailbroken and invaded by NSO Group's "government-exclusive" spyware. Upon confirming the zero-day iOS vulnerabilities, Citizen Lab and Lookout notified Apple -- and now Apple has released a fix.
Our Other Pubs: