By creating filesystem backups of infected iPhones, crucial insights into the attack process and the malware's functionality were uncovered. In response to the challenges posed by iOS's closed system, Kaspersky utilized the Mobile Verification Toolkit to conduct an extensive analysis of the malware. Operation Triangulation shows that the malware is using iMessage zero-click exploits Operation Triangulation provides an in-depth analysis of the malware While the initial message and attachment are swiftly erased, a concealed payload with root privileges remains, allowing the perpetrators to collect sensitive information, execute remote commands, and maintain persistence. Exploiting this flaw, attackers can discreetly download additional malware from their servers. These techniques enable the delivery of malicious code to the devices without requiring any user interaction. Operation Triangulation exploits iOS vulnerabilityĪccording to Kaspersky's investigation, iPhones connected to their network have fallen prey to hackers employing an iOS vulnerability, leveraging iMessage zero-click exploits. This article delves into the details of the campaign, its impact, and the subsequent accusations made by Russia's FSB intelligence and security agency. Kaspersky, in its efforts to combat this threat, has named the operation 'Operation Triangulation' and is urging individuals with information to come forward and collaborate.

Kaspersky mobile