Spyware Infects iPhones Belonging to Employees at Kaspersky

pcmag.com:

Is the US government using iOS spyware in Russia? That's the allegation coming from the Kremlin after newly discovered spyware infected “several dozen iPhones” belonging to employees at antivirus provider Kaspersky. 

According to CEO Eugene Kaspersky(Opens in a new window), the spyware infected the iPhones via iMessage through an attachment capable of exploiting a “number” of previously unknown vulnerabilities in iOS. 

“Without any user interaction, the message triggers a vulnerability that leads to code execution,” the company warned in a report(Opens in a new window). This code execution can trigger an iPhone to download additional components to secretly hijack the device, enabling the spyware’s creator to initiate microphone recordings, loots photos, and pilfer other data. 

However, there’s still a lot we don't know about the spyware, which has been dubbed Operation Triangulation. Kaspersky says its investigation into the incident is ongoing, but the Moscow-based company points out the spyware appears to be new. 

“Important: The activity observed in Operation Triangulation does not overlap with already known iOS campaigns, such as Pegasus, Predator, or Reign,” the CEO said, alluding to infamous spyware strains from Israeli spyware dealers such as NSO Group, Intellexa, and QuaDream. 

Curiously, Kaspersky also noted: “We are quite confident that Kaspersky was not the main target of this cyberattack. The coming days will bring more clarity and further details on the worldwide proliferation of the spyware.” 

Kaspersky refrained from tying the spyware to any group, but the Kremlin was quick to cast blame. Russia's Federal Security Service (FSB) announced(Opens in a new window) it uncovered “a reconnaissance operation by