‘Operation Triangulation’ exposes advanced iMessage attack on security firm

By news@appleinsider.com (Andrew Orr) Security experts have disclosed an astonishing four-year campaign of iPhone hacking targeting the Russian security company Kaspersky, which has been labeled “the most sophisticated exploit ever.”Researchers uncover a sophisticated iPhone attackOperation Triangulation’s attack involved a complex series of exploits, including a zero-click iMessage attack, targeting iOS up to version 16.2. The attack began with a malicious iMessage attachment exploiting an undocumented TrueType font instruction, leading to remote code execution.The exploit chain incorporated multiple techniques such as return/jump oriented programming, JavaScript obfuscation, and manipulation of JavaScriptCore and kernel memory, according to Kaspersky researcher Boris Larin. Continue Reading on AppleInsider | Discuss on our Forums

Source:: Apple Insider