[ad_1]
Towards the end of last week, security researchers from Google's Project Zero team provided us with fascinating details about a sophisticated exploit for iPhone users. The exploit itself was based on a number of everyday vulnerabilities and, oddly enough, on a malicious device installed in a non-discriminating way on any device having visited an infected website.
Once installed, the malware would collect photos, private messages, passwords and even send real-time GPS location data from the user. Initially, the Project Zero team did not mention who was behind the malware or who it was intended for, with the exception of an encrypted message that could have been designed to target a specific ethnic group.
A few days later, we know a little more about the origins of the malware. Citing sources familiar with the subject, TechCrunch reports that the malware was probably a state-sponsored attack targeting the country's Uyghur Muslim community.
"This is part of the Chinese government's latest efforts to suppress the minority Muslim community in recent history," TechCrunch Notes. "Over the past year, Beijing has arrested more than one million Uighurs in internment camps, according to a UN human rights committee."
In addition, some Muslims in Uighur regions have been banned from fasting during the month of Ramadan in recent years.
Interestingly, later reports added that the malicious program in question was not targeting iOS users only. according to Forbes, the anti-malware campaign was also targeting Android and Windows users.
Speaking of the sophistication of the attack – which persisted for two years – sources tell Forbes that the malware on impacted sites was regularly updated to adapt to Uyghur computer usage habits.
Apple has fixed the iOS vulnerabilities in February, but it should be noted that even a company as security-conscious as Apple can cope with the state-sponsored malware.
Image Source: Photo by JIM LO SCALZO / EPA-EFE / Shutterstock
[ad_2]
Source link