[darkninja]

A recently discovered spy campaign targeting Apple iPhones using zero-click remote code execution via a chain of 4 zero-day attacks, including highly cryptic, completely undocumented MMIO registers and hardware functions that are never even used by the firmware.
In a nutshell, the attack begins by sending an iMessage to an arbitrary phone, which, without any user action and without the user's notice, collects and downloads tons of private data (and much more, such as microphone recordings), and actively takes steps to hide all this activity from the user and novice criminologists. Apple patched the underlying vulnerability on October 25, 2023.

"This is definitely the most complex chain of attacks we've ever seen."

The report itself, there is still a lot of wild information there:
https://youtube.com/watch?v=7VWNUUldBEE

The author of this attack is unknown, as is the method by which they gained knowledge of these unused, undocumented hardware functions. Russian intelligence accused Apple of providing the NSA with a backdoor

Read more..

[Gc914lad]

Does method still work ??