![\"iOS](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2016\/08\/iOS-9.3.5-Update.png\")
<\/p>\n<\/p>\n
Apple today released iOS update 9.3.5, available for iPhone 4s and later, iPad 2 and later and iPod touch (5th generation) and later. The update addresses three vulnerabilities and received the same generic listing<\/a> as most other updates do. Yet there is much more to this update\u00a0than what Apple mentions in their documentation.<\/p>\n Discovered by Citizen Lab and Lookout, these three vulnerabilities have been named “Trident.” Exploiting Trident will give an attacker access to your messages, calls, emails, and logs from apps like Gmail, Facebook, Skype, WhatsApp, FaceTime, Calendar, and Viber, among\u00a0others.<\/p>\n As it turns out, a company called NSO Group (an Israeli-based organization that is said to specialize in cyber warfare and\u00a0sells their services to governments) has been exploiting Trident as part of one of their spyware products, called Pegasus.<\/p>\n Image from an NSO Group brochure posted on SIBAT (The International Defense Cooperation Directorate of the Israel Ministry of Defense).<\/p><\/div>\n Pegasus is the most sophisticated attack we\u2019ve seen on any endpoint because it takes advantage of how integrated mobile devices are in our lives and the combination of features only available on mobile \u2014 always connected (WiFi, 3G\/4G), voice communications, camera, email, messaging, GPS, passwords, and contact lists. It is modular to allow for customization and uses strong encryption to evade detection. (source<\/a>)<\/p><\/blockquote>\n By sending a victim a phishing text message with a malicious URL, if opened, a web browser will load a page and the page contents will exploit those vulnerabilities. As these vulnerabilities were not known until now, there was no defense and a victim would not even know the device had been\u00a0compromised. Citizen Lab and Lookout believe that this spyware has been around for years, as far back as iOS 7.<\/p>\n https:\/\/twitter.com\/csoghoian\/status\/768863311236567041<\/p>\n Citizenlab also wrote a report<\/a> that describes how Trident was exploited to target human rights defender Ahmed Mansoor. Other sources state this was the exploit used to target New York Times journalists recently. Needless to say this is a significant exploit. Citizen Lab and Lookout worked directly with Apple’s security team and the 9.3.5 update was created to address the Trident vulnerabilities.<\/p>\n I strongly\u00a0recommended updating\u00a0all your\u00a0iOS devices that support iOS 9.3.5\u00a0as soon as possible. To do so, on your iPhone or iPad simply go to Settings<\/strong> > General<\/strong> > Software Update<\/strong>, or you can download and install the update in iTunes when your iOS device is connected to a computer with an Internet connection. As with any update, make sure you have a backup to iCloud or iTunes<\/a> before installing.<\/p>\n","protected":false},"excerpt":{"rendered":" Apple today released iOS update 9.3.5, available for iPhone 4s and later, iPad 2 and later and iPod touch (5th generation) and later. The update addresses three vulnerabilities and received the same generic listing as most other updates do. Yet there is much more to this update\u00a0than what Apple mentions in their documentation. Discovered by […]<\/p>\n","protected":false},"author":79,"featured_media":55963,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[52,69,3061,3070,119,125,3067,982],"class_list":["post-55852","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-news","tag-exploit","tag-ios","tag-ios-9-3-5","tag-pegasus","tag-security-update","tag-spyware","tag-trident","tag-zero-day"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t![\"NSO\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2016\/08\/NSO-300x103.png\")
<\/a>