Hackers are turning web browsing into a spyware trap
Hackers are finding new ways to infect iPhones with spyware — even when victims never click a malicious link — according to new research shared with Axios. Why it matters: Software once used to spy on politicians, journalists and other high-value targets is becoming a tool for everyday cybercriminals looking to steal cryptocurrency and login credentials. Driving the news: Researchers at iVerify…
Cybercriminals are increasingly exploiting online advertising infrastructure and legitimate websites to deliver spyware to iPhones, even without direct clicks from victims, according to new research. Two campaigns, with suspected ties to China, have been discovered by researchers at iVerify and Report URI. One attack infected an employee's iPhone after they scrolled past a soccer advertisement on Instagram, stealing login credentials and searching cryptocurrency wallets.
The other campaign affected nearly 8,000 legitimate websites, using expired domains to redirect visitors toward malicious software. Both attacks exploit tools that automatically load as people browse the internet, avoiding the need for victims to click malicious links. Researchers warn that this is now the fastest proliferating threat to mobile devices, emphasizing the importance of keeping mobile operating systems updated to protect against these threats.
Written by urgent.news from Axios's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
