Our attackers are
targeting a famous businessman, they want to get his personal information.
Our businessman of course has an iPhone . The attackers decide to throw a virus to pegasus there to collect data . So they will use the legendary ForcedEntry.I'll tell you a little bit about it.
It was a
bug of integer overflow in CoreGraphics, which is used to draw 2D-graphics.
ForcedEntry allowed it to send malicious PDF files to victims' devices and run arbitrary code in iOS and macOS, eventually leading to a system takeover and installation of Pegasus spyware.ForcedEntry doesn't require a victim to open a link received in iMessages for their device to become infected.But what's worse is another bug that is triggered called CASCADEFAIL.
This vulnerability allows attackers to delete important entries from usage and process logs. In the case of ForcedEntry, this bug allowed evidence to be removed from the phone's DataUsage.sqlite file.
There are two separate zero-click exploits for iMessage: Kismet, targeting iOS 13.5.1 devices, and ForcedEntry, targeting the latest iOS 14 devices.In addition to ForcedEntry, Apple has also fixed another dangerous problem in its products:
another zero-day, use-after-free vulnerability, CVE-2021-30858.
The bug was discovered by an anonymous researcher and had to do with the Safari browser engine (WebKit).The problem allowed attackers to create malicious pages that lead to
commands being executed when visited from an iPhone and macOS-based device. The vulnerability was also reportedly used to attack users.
By spreading with the help of these vulnerabilities or other 0 deeds, the attackers start collecting data about the victim . Also, attackers can use wifi networks and more to infect .
Throwing the malware on the victim's phone starts surveillance.
I think that's all.
As a conclusion I can say 🔒
Attackers' attacks can be very cunning and affect many areas.
For this, be vigilant and work on protecting and updating your system. And also do not forget about the human factor, because as we see social engineering and compromising employees play a major role in many attacks.
More about the attacks themselves and their methods will be in the archive below. There will also be an interesting article about types of attackers The next post in the series will be about forensics and tracking attackers in practice 🔑Thank you for reading❤️
And remember, if you go through a mirror whose glass has become like a haze, you will find yourself in a looking glass. But how to get out is a big question🪞🎀
#cve #exploit #snooping #malware #pentest #attackers #ios