Spyware is extremely stealthy and people usually have no idea it’s on their phone, but it might be slightly slower than usual. Spyware can reach the device without the user even having to click-hence the term “zero-click” attack. Nation-state attackers usually use it on high-profile targets.Īttacks can reach iPhones via a message containing an image sent on iMessage in the case of the iOS 16.6.1 flaw. The Pegasus spyware is already famous because it has been used multiple different times.

Spyware is a nasty attack method because it allows the adversary to see pretty much everything you do on your iPhone. What Is A Spyware Attack And How Can I Tell If I am Affected? This is even more true when the details are out there because it opens the door for more adversaries to try and take control of people’s iPhones. In security, the time between exploited attacks and fixes-as well as people applying those patches, is key. Citizen Lab timed the iOS 16.6.1 fix with a blog detailing what had happened and how the attack exploiting the vulnerabilities was performed. What if it went wrong again? Not only would Apple look bad, but the attack was already out there. Of course, Apple itself tends to stay quiet about the ifs and whys, but my guess is that the fix in iOS 16.6.1 was far too important to risk. It was a high-profile error, which led to the iPhone maker being red-faced-but my understanding is that Apple never wanted that sort of bad optics to happen again. That’s in theory, anyway.Ī couple of months ago, Apple issued a Rapid Security Response update that had to be retracted because the fix broke something else. This new feature in iOS 16 sees Apple push security-only upgrades to your phone in an easy-to-download and install size to ensure you are always protected.

Some of you might wonder why iOS 16.6.1 wasn’t released as a Rapid Security Response Update. “The exploit can be used by an attacker w/out the victim taking an action,” she added.“Here, the attacker can send the attack via iMessage & compromise device to spy/harm.” Why Wasn’t iOS 16.6.1 Released As A Rapid Security Response? “These exploits are usually used against folks with high threat models-people in the public eye, folks working in government, individuals being targeted or harassed by nation state actors, journalists,” security expert Rachel Tobac wrote in a tweet.

For ios instal AD Sound Recorder 6.1