Apple had already alerted its users in April about the presence of this spyware targeting iPhones. Today, the firm is issuing the recall, indicating that this threat is intensifying.
Like a sense of deja vu. “ Apple has detected that you are the target of a mercenary spyware attack that is attempting to remotely compromise the iPhone associated with your Apple ID. » Clubic had already told you about it when the Cupertino company warned its users in 92 countries around the world against the dangers of such an attempt to take remote control of their iPhones.
If you own an iPhone and received this message from Apple, this is neither a joke nor a security exercise. Apple does not loosen its jaws and continues to alert its users of the potential damage of this software. Despite the scale of this spying, the company has implemented security barriers to protect iPhone owners from being spied on.
“ The return of LightSpy » mentioned by BlackBerry, denied by Apple
While Apple has issued alerts in more than 150 countries since 2021 on these “mercenary” spyware attacks, the company has always refused to communicate on the identity of the hackers. She also did not say whether it was a state attack, and she dwelt even less on the nature of the software involved. This is perhaps a way to avoid arousing the suspicion of cybercriminals who have not yet attacked iPhones, or to protect potential victims or those already under surveillance. Still, secrecy is required.
A silence that BlackBerry, yesterday a smartphone giant, today converted into a security company, breaks on its blog. Indeed, LightSpy is openly designated as the ideal culprit.
LightSpy is a comprehensive monitoring tool that primarily focuses on exfiltrating victims’ private information, including highly precise location data and audio recordings during VoIP calls. In other words, it allows the hacker to locate his target with almost perfect precision, which makes him extremely dangerous.
LightSpy modules are designed to extract information from devices and recorded files. In particular, they target popular messaging apps such as QQ, WeChat and Telegram. Additionally, LightSpy has a plugin that can explore the victim’s payment history with WeChat Pay (Weixin Pay in China). It can also access contacts, SMS, call history, GPS location, Wi-Fi connection history and browsing history of Safari and Chrome browsers. Once implanted in the iPhone, it becomes a perfect little spy.
Apple informs its users that they are being spied on, but how to avoid spyware on your iPhone?
Apple customer support publishes a note regarding spyware threat notifications in which it is indicated that the Cupertino company takes this matter very seriously, regardless of the culprits and the software in question. Indeed, ” if Apple detects activity consistent with a mercenary spyware attack, we notify users “, we can read in the post. They first receive a threat notification when logging in on Apple ID as well as an e-mail and an iMessage to the corresponding address and telephone number.
Apple then indicates the precautionary measures to take to avoid being the next target of this software, the first being to activate the lock mode of the iPhone. Then, it will be a question of respecting the rules of use regarding the protection of smartphones and mobile devices, which Clubic also recommends.
Make sure to update your iPhone to the latest version of iOS, which includes the latest security patches. Change your passwords to strong, unique combinations online, and use two-factor authentication and a strong password for your Apple ID. Only install apps from the App Store and never click on links or attachments from unknown senders, whether via email or iMessage.
Sources: Wired (paid access), Apple, BlackBerry
7