About six months ago, a security breach was disclosed by Apple detailing a new kind of vulnerability that Apple devices were vulnerable to. The statement released by Apple states that the security breach was a “zero-click” vulnerability. This means that the vulnerability was discovered by the attackers before Apple was even made aware of it; therefore, no patch exists for zero-day vulnerabilities, which gives these types of breaches a high chance to succeed. Although the intention behind this hack was to gain access to a device owned by an unnamed Saudi activist, Apple said that the breach could be exploited by hackers if Apple users were to receive any malicious pdf files containing this virus. According to the head of security engineering and architecture at Apple, these kinds of attacks are “highly sophisticated …cost millions of dollars to develop…and are used to target specific individuals” (Krstić, 2021). The intention behind this statement was to reassure users that this security breach should not be a threat to a majority of their users.
The attackers are from an Israeli spyware company called the “NSO group”. This group is primarily known for their “zero-click” spyware called “Pegasus”. Whereas typical cyber attacks require interaction between the user and the malicious content, Pegasus does not require any sort of interaction, thus making it almost impossible for individuals to know if they have been compromised or not. The initial entry point for no zero click/no click exploits for Pegasus is iMessage. Therefore, victims can be targeted with only their phone numbers or Apple IDs. In this scenario, the Saudi official was sent a text with the Pegasus Spyware which allowed the NSO group to gather any and all of the data they wished to acquire.
Although the NSO group says that the company only provides intelligence and law enforcement agencies with the spyware, through “zero-click” Pegasus hacks, such as the one manufactured by the NSO group, people all around the world are at risk of having their data get exploited if the spyware were to end up in the wrong hands. Due to this data breach, the NSO group was able to target an individual and gain all of the aforementioned information. In order to protect individual information, Apple encouraged all of their users to make sure to install/update their devices as soon as possible in order to prevent any security breaches. Apple also rolled out a mass iOS update that included security patches to prevent the spyware from infecting any of their other users.