Mobile Threat Landscape Update

On this week's episode of The Microsoft Threat Intelligence Podcast, Sherrod DeGrippo is joined by Christine Fossaceca (twitter.com/x71n3), Laurie Kirk (linkedin.com/in/laurie-kirk), and Apurva Kumar (linkedin.com/in/abby-kcs/?originalSubdomain=ca). Today's discussion concerns a recent release from the Chaos Computer Congress, where researchers discovered and analyzed a zero-click attack on iPhones. The attack involves four zero-day vulnerabilities in iOS, requiring a malicious iMessage, a hardware bug, and a Safari exploit. The spyware discovered was specifically targeting security researchers. Sherrod, Christine, Laurie, and Apurva explore the significance of this attack, its implications for mobile security, the concept of zero-click attacks becoming more prevalent on mobile devices, and the importance of researchers being vigilant about their security.

In this episode you’ll learn:

• Why you should consider the threat landscape when traveling internationally

• The technical and strategic aspects of mobile threat intelligence

• Prevalence of spyware on both Android and iOS platforms

Some questions we ask:

• How can attackers disguise Trojans to harvest personal details?

• What are the communication vehicles that you're seeing phishing come from?

• How do I know if I have malware on my phone?

Resources:
Follow Christine on Twitter @x71n3 (twitter.com/x71n3) & @herhaxpodcast (twitter.com/herhaxpodcast)
View Laurie Kirk on LinkedIn (linkedin.com/in/laurie-kirk)
View Apurva Kumar on LinkedIn (linkedin.com/in/abby-kcs/?originalSubdomain=ca)
View Sherrod DeGrippo on LinkedIn (linkedin.com/in/sherroddegrippo)

DEV-0196: QuaDream’s “KingsPawn” malware targets Europe, North America, the Middle East, and Southeast Asia | Microsoft Security Blog (microsoft.com/en-us/security/blog/2023/04/11/d…)
37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchers (youtube.com/watch?v=1f6YyH62jFE)

Related Microsoft Podcasts:

•
Afternoon Cyber Tea with Ann Johnson (afternooncybertea.com)

•
The BlueHat Podcast (bluehatpodcast.com)

•
Uncovering Hidden Risks (uncoveringhiddenrisks.com)

Discover and follow other Microsoft podcasts atnews.microsoft.com/podcasts
Get the latest threat intelligence insights and guidance at Microsoft Security Insider (nam06.safelinks.protection.outlook.com/?url=ht…)

The Microsoft Threat Intelligence Podcast is produced by Microsoft and distributed as part of N2K media network.