Apple fixes the new iPhone Zero-Days insect used in Paragon Spyware Hacks

The researchers revealed on Thursday this Two European journalists were hacked from their iPhone with spyware made by Paragon. Apple says it has fixed the error that was used to penetrate their phones.

The Citizen Laboratory wrote in its report, which participated with Techcrunch before its publication, that Apple told her researchers that the defect that was used in the attacks “mitigated in iOS 18.3.1”, a software update for iPhone devices released on February 10.

Until this week, consultant this security update Mentioned Only one disadvantage is not related The attackers were allowed to disable the iPhone safety mechanism This makes it difficult to open phones.

Thursday, however, Apple Her consultant update on February 10 To include details about a new defect, it was also fixed at the time but not published.

“There is a logical problem when processing a harmful image or video made via the iCloud link. Apple realizes a report that this problem has been used in a very advanced attack against specific targeted individuals,” says the consultant that has now been updated.

In the final version of its published report on ThursdayThe Citizen Laboratory confirmed that this is the defect used against the Italian journalist Sero Pellegrino and the “prominent” European journalist, whose name was not revealed.

It is not clear why Apple did not reveal this corrected defect up to four months after the iOS update, and a Apple spokesman did not respond to the request to comment on clarity.

The Paragon Spyware scandal began in January, when WhatsApp was notified of about 90 of its users, Including journalists and human rights activistsThey were targeting the spyware made by Paraguce, which was called graphite.

Then, at the end of April, Many iPhone users received a notification From Apple alerting them that they were the targets of mercenary spyware. The alert did not mention the spyware company behind the piracy campaign.

On Thursday, Citizen Laboratory Its results were published This confirms that two journalists who received this Apple notification were hacked using Paragon spyware.

It is not clear whether all Apple users who received notification are also targeted by graphite. Apple Alert said that “today’s notification is sent to the affected users in 100 countries,” said Apple Alert.