TECH
Released a patch after a phone was infected via messaging
Share Apple urgently had to fix a computer flaw that controversial Pegasus software managed to exploit to infect iPhones. Spyware from Israeli company NSO successfully hacked Apple-branded devices without using deceptive links or buttons, the commonly used technique. The flaw was spotted last week by Citizen Lab researchers, who discovered that a Saudi activist's iPhone was infected via iMessage, Apple's messaging system. According to this cybersecurity organization at the University of Toronto, Pegasus has been using this vulnerability "since at least February 2021". "This intrusion, which we called Forcedentry, targeted Apple's image rendering library and worked against Apple iOS, MacOS and WatchOS devices," Apple-branded cell phone, computer and smartwatch operating systems. "After identifying this flaw (...), Apple quickly developed and deployed a patch in iOS 14.8 to protect our users," said Ivan Krstic, director of Apple's security systems, in response to a request from AFP. The Californian group praised Citizen Lab for its work and stressed that these "ultra-sophisticated" attacks "cost millions of dollars, do not last long and are used to target specific people". Therefore, "they are not a threat to the vast majority of our users," said Ivan Krstic. "But we continue to work tirelessly to defend all of our customers."