Cybercriminals are using malicious online advertisements and compromised websites to target iPhones with spyware designed to steal cryptocurrency and sensitive information, according to Forbes.
The attacks can infect vulnerable iPhones simply by displaying a malicious advertisement or opening an infected webpage, without requiring users to click anything.
Security researchers from iVerify and Report URI identified thousands of compromised websites spreading malicious code. They also discovered an attack delivered through an Instagram advertisement.
How the Attack Works
Researchers identified a hacking operation called DeadTag that exploits compromised websites and advertising systems to target iPhone users.
According to Forbes, at least 6,600 legitimate websites were affected, collectively receiving approximately 49 million monthly visits. Of these, 248 websites were directly distributing iPhone spyware.
The attackers use two hacking tools, Coruna and DarkSword, which exploit security vulnerabilities in iOS.
Once a device is compromised, the spyware can access passwords, messages, contacts, location information, and cryptocurrency wallet details.
Instagram Ads Used to Spread Malware
Researchers also discovered a malicious Instagram advertisement that delivered DarkSword spyware to an iPhone while the user was scrolling.
The advertisement used a World Cup theme and required no interaction from the victim.
According to iVerify CEO Rocky Cole, users can become infected even when browsing legitimate websites or social media platforms.
The attackers primarily aim to steal cryptocurrency from affected devices.
Which iPhones Are at Risk?
The attacks mainly target iPhones running outdated versions of iOS, as Apple has already released patches for the known vulnerabilities.
However, devices without the relevant security updates remain at risk.
Researchers recommend updating iPhones to the latest supported iOS version to protect against these attacks.
Although thousands of websites were affected, the number of successfully infected iPhones remains unknown.
The post Your iPhone Could Get Hacked Just by Scrolling Instagram appeared first on ProPakistani.