Recently, there have been reports of cybercriminals targeting iPhone users with a new Zero-click iOS exploit, codenamed ‘Operation Triangulation’. A Zero-click exploit is a cyber attack requiring no user interaction. Operation Triangulation involves using iMessage to gain access to a device and mostly seems to target iOS version 15.7 or older.
So how does it work?
In this attack scenario, targets are contacted through iMessage, receiving a message containing a harmful attachment. Without any interaction from the target, the attacker successfully infects their device with malicious software. Subsequently, the initial iMessage and attachment are automatically removed from the target's device, leaving no trace behind.
How can users protect themselves?
You can take several simple steps to help improve your cyber risk and reduce the likelihood of you becoming a target of this threat.
1) The first step is to update your iOS software and apps regularly. Each update will likely include security patches and fixes, meaning older versions could expose you.
2) Secondly, remain vigilant and avoid opening attachments from unknown sources. Even if the recipient appears legitimate, always err on the side of caution. If unsure, you can contact the recipient via other methods (call them or message them via social media) to verify if they have sent you the message.
3) Download and use a security solution that can detect and block malicious apps; this will help protect you even if you accidentally open up a malicious attachment.
4) For this particular threat, as a precaution, disabling iMessage will also prevent you from being targeted.
Operation Triangulation:
The investigation into Operation Triangulation is still ongoing, and at the moment, there is no verified security patch or solution. If our team reports any further updates, we will update our post accordingly.
Staying Safe With DynaRisk
Did you know that our personal risk management solution, Cyber Xpert, automatically scans for known vulnerabilities and alerts you of risks?
Discover how Cyber Xpert can assist you in mitigating cyber risks and safeguarding yourself and your loved ones from cyber attacks. Learn more about it now.