Apple releases iOS 9.3.5 to fix security issues following spyware attack

Apple has released a security fix for iOS devices following the discovery of malware targeting the platform that was found circulating in the Middle East.

A security firm Lookout and Citizen Lab announced that it has discovered a major security flaw that exploits iOS and can give a third party complete control over your iPhone. The report points to NSO Group, an Israeli company that sells software to invisibly track a mobile phone, as the developer of the spyware. Dubbed as “Trident” these vulnerabilities could be used to access the device’s location, read contacts, texts, calls, and emails, as well as turn on the device’s microphone.

Lookout and Citizen Lab said in a blog post,

The attack sequence, boiled down, is a classic phishing scheme: send text message, open web browser, load page, exploit vulnerabilities, install persistent software to gather information. This, however, happens invisibly and silently, such that victims do not know they’ve been compromised.

Apple has released patches to fix these vulnerabilities. iOS 9.3.5 is now available through Software Update for iPhone 4s and later, iPad 2 and later, iPod touch (5th generation) and later. It can also be installed through iTunes on a connected Mac or PC. Apple is referring to this build as an “important security update” and is recommended for all users.

Source: 1, 2

via:fonearena