A very deep dive into iOS Exploit chains found in the wild
Summary: Google's Threat Analysis Group found a small collection of hacked websites running indiscriminate watering hole attacks that used iPhone 0-day to install a monitoring implant on visitors, with no target discrimination and an estimated thousands of visitors per week. Working with Project Zero, TAG collected five separate, complete and unique iPhone exploit chains covering almost every version from iOS 10 through the latest iOS 12, comprising fourteen vulnerabilities across the five chains: seven for the browser, five for the kernel and two separate sandbox escapes.
What's compelling: At least one privilege escalation chain was still 0-day and unpatched at discovery (CVE-2019-7287 and CVE-2019-7286), and the implant could steal iMessages, photos and GPS location in real time - a sustained campaign of at least two years against iPhone users in certain communities, where being targeted might mean simply being born in a certain geographic region or being part of a certain ethnic group.
Read the original at Google Project Zero ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2019-7286CVE-2019-7287
- Related
- Root Cause Analyses for 0-day In-the-Wild Exploits Cyber Risks ·CVE-2019-7287: Apple iOS Memory Corruption Vulnerability Known Exploited Vulnerabilities · May 23, 2022CVE-2019-7286: Apple Multiple Products Memory Corruption Vulnerability Known Exploited Vulnerabilities · May 23, 2022