Security researchers are warning certain iPhone users about a pair of spyware attacks that can steal personal information. Axios reports the scams are particularly dangerous because the user’s phone can be hacked by simply scrolling past an ad or visiting a legitimate website. Both schemes target iPhone users who have not updated their operating systems. Apple has patched vulnerabilities in its system that make the schemes work, however if the user hasn’t updated their system, they are at risk. Researchers at iVerify and Report URI say they’ve uncovered that the schemes target online advertising infrastructure to put spyware on phones. The schemes are believed to be tied to criminal groups with suspected links to ChinaOne of the scams works by infecting the target’s phone once they scroll past an ad. An example provided by iVerify said that one person’s phone was infected after passing a soccer ad on Instagram. Axios reports the ad automatically triggered an attack which stole the person’s login credentials and searched their cryptocurrency wallets.“Users aren’t visiting malicious websites. They’re not doing anything wrong. They’re just scrolling and being infected,” iVerify CEO and co-founder Rocky Cole told Forbes. One of the things that makes this scheme so dangerous is that it checks the target’s phone operating system to determine if it is vulnerable before launching the attack. The other scheme works by using expired website domains to infect legitimate websites. Hackers purchased an estimated 680 domains that were once relied on by over 8,000 websites for operations like chatbots and analytics tools. The legitimate websites still load code from the expired domains, which allows hackers to redirect vulnerable iPhone visitors toward the spyware. Cole urges users to keep their operating systems updated in order to best protect themselves from these spyware attacks. To update the operating system on an iPhone, open settings and select general. Then select software update and then tap download and install or update now.
Click Here For The Original Source.
——————————————————–
