Apple Scrambles To Fix Israeli Firm’s iPhone Hack
Image by Apple
— The discovery of an Israeli firm’s secret method of hacking in iPhones and iPads prompted Apple Inc to issue a patch to fix a flaw in the security of its products.
The iPhone hack of the NSO Group, an Israeli company that makes software for governments which can secretly target mobile phones and gather information, was discovered after a prominent United Arab Emirates dissident flagged a suspicious web link sent to his phone, Reuters reported.
The thwarted attack on the human rights activist, Ahmed Mansoor, used a text message that invited him to click on the link but instead of clicking, he forwarded the message to researchers at the University of Toronto’s Citizen Lab.
They discovered that the hack is the first known case of software that can remotely take over a fully up-to-date iPhone 6.
Experts at Citizen Lab worked with security company Lookout and determined that the link would have installed a program taking advantage of a three flaws that Apple and others were not aware of. The researchers disclosed their findings on Thursday.
“Once infected, Mansoor’s phone would have become a digital spy in his pocket, capable of employing his iPhone’s camera and microphone to snoop on activity in the vicinity of the device, recording his WhatsApp and Viber calls, logging messages sent in mobile chat apps, and tracking his movements,” Citizen Lab wrote in a report released on Thursday.
The researchers said they had alerted Apple a week and a half ago, and the company developed a fix and distributed it as an automatic update to iPhone 6 owners.
Apple spokesman Fred Sainz confirmed that the company had issued the patch after being contacted by researchers.
Tools such as that used by NSO, a remote exploit for a current iPhone, cost as much as $1 million, according to Reuters.
NSO Chief Executive Shalev Hulio referred questions to spokesman Zamir Dahbash, who said the company “cannot confirm the specific cases” covered in the Citizen Lab and Lookout reports.
Dahbash said NSO sells within export laws to government agencies, which then operate the software.
“The agreements signed with the company’s customers require that the company’s products only be used in a lawful manner,” he added. “Specifically, the products may only be used for the prevention and investigation of crimes.”
Dahbash did not answer follow-up questions, including whether the exposure of the tools use against Mansoor in UAE and a Mexican journalist would end any sales to those countries.
NSO has kept a low profile in the security world, despite its 2014 sale of a majority stake for $120 million to California private equity firm Francisco Partners. That company’s chief executive, Dipanjan Deb, did not return a call on Thursday. In November 2015, Reuters reported that NSO had begun calling itself “Q” and was looking for a buyer for close to $1 billion.
I hope you appreciated this article. Before you go, I’d like to ask you to please support the Forward’s award-winning journalism this Passover.
In this age of misinformation, our work is needed like never before. We report on the news that matters most to American Jews, driven by truth, not ideology.
At a time when newsrooms are closing or cutting back, the Forward has removed its paywall. That means for the first time in our 126-year history, Forward journalism is free to everyone, everywhere. With an ongoing war, rising antisemitism, and a flood of disinformation that may affect the upcoming election, we believe that free and open access to Jewish journalism is imperative.
Readers like you make it all possible. Right now, we’re in the middle of our Passover Pledge Drive and we still need 300 people to step up and make a gift to sustain our trustworthy, independent journalism.
Make a gift of any size and become a Forward member today. You’ll support our mission to tell the American Jewish story fully and fairly.
— Rachel Fishman Feddersen, Publisher and CEO
Join our mission to tell the Jewish story fully and fairly.
Only 300 more gifts needed by April 30
