“We attribute the exploit to NSO Group’s Pegasus spyware with high confidence, based on forensics we have from the target device,” said Bill Marczak, senior researcher at Citizen Lab, which is based at the University of Toronto’s Munk School of Global Affairs and Public Policy. He said the attacker likely made a mistake during the installation which is how Citizen Lab found the spyware.
Citizen Lab said Apple confirmed to them that using the high security feature “Lockdown Mode” available on Apple devices blocks this particular attack. “This shows that civil society is once again serving as the early warning system about really sophisticated attacks,” said John Scott-Railton, senior researcher at Citizen Lab.
The flaw allowed compromise of iPhones running the latest version of iOS (16.6) without any interaction from the victim, the digital watchdog said. The new update fixes this vulnerability. Apple issued new updates on its devices after investigating the flaws reported by Citizen Lab.
!(function(f, b, e, v, n, t, s) {
function loadFBEvents(isFBCampaignActive) {
if (!isFBCampaignActive) {
return;
}
(function(f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function() {
n.callMethod ? n.callMethod(…arguments) : n.queue.push(arguments);
};
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = ‘2.0’;
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.defer = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(f, b, e, ‘ n, t, s);
fbq(‘init’, ‘593671331875494’);
fbq(‘track’, ‘PageView’);
};
function loadGtagEvents(isGoogleCampaignActive) {
if (!isGoogleCampaignActive) {
return;
}
var id = document.getElementById(‘toi-plus-google-campaign’);
if (id) {
return;
}
(function(f, b, e, v, n, t, s) {
t = b.createElement(e);
t.async = !0;
t.defer = !0;
t.src = v;
t.id = ‘toi-plus-google-campaign’;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(f, b, e, ‘ n, t, s);
};
window.TimesApps = window.TimesApps || {};
var TimesApps = window.TimesApps;
TimesApps.toiPlusEvents = function(config) {
var isConfigAvailable = “toiplus_site_settings” in f && “isFBCampaignActive” in f.toiplus_site_settings && “isGoogleCampaignActive” in f.toiplus_site_settings;
var isPrimeUser = window.isPrime;
if (isConfigAvailable && !isPrimeUser) {
loadGtagEvents(f.toiplus_site_settings.isGoogleCampaignActive);
loadFBEvents(f.toiplus_site_settings.isFBCampaignActive);
} else {
var JarvisUrl=”
window.getFromClient(JarvisUrl, function(config){
if (config) {
loadGtagEvents(config?.isGoogleCampaignActive);
loadFBEvents(config?.isFBCampaignActive);
}
})
}
};
})(
window,
document,
‘script’,
);
