Cyber Risks · Cisco Talos

Threat Source newsletter (Aug. 18, 2022) — Why aren't Lockdown modes the default setting on phones?

Summary: Apple announced a new Lockdown Mode for iOS that, when enabled, turns off many features attackers exploit when targeting a mobile device with spyware, blocking access to APIs such as speech and facial recognition. Android has had its own Lockdown Mode since 2018, but it only disables the fingerprint reader and facial ID scan, turns off immediately after the user logs in again, and must be manually re-enabled every time.

Bottom line: The protections that blunt spyware like NSO Group's Pegasus are opt-in and, on Android, expire at the next login, so the default state for most phones is the exposed one.

Read the original at Cisco Talos ↗

Topics
Malware
Related