3 ms·

Install the iVerify app for analysis and instructions to limit your risk to these 0days. https://apps.apple.com/us/app/iverify/id1466120520 https://apps.apple.c

by dguido 6y ago

Install the iVerify app for analysis and instructions to limit your risk to these 0days. https://apps.apple.com/us/app/iverify/id1466120520 https://apps.apple.com/us/app/iverify/id1466120520 iVerify pushes news with analysis of every new public exploit for iOS. Here are the instructions that it also posted to twitter (https://twitter.com/IsMyPhoneHacked/status/1252954457954009088 https://twitter.com/IsMyPhoneHacked/status/12529544579540090...) 1. Go to Settings > Password & Accounts. Set Fetch New Data to "Manual" and disable "Push". This will ensure that new mail is only downloaded when you specifically request it, and it will no longer do so automatically. and/or 2. Use Safari or different e-mail clients such as GMail and Outlook. These mail clients are unaffected by the currently disclosed 0days.

saagarjha 6y ago
I am honestly curious what "Threat detection" from the second screenshot is supposed to do.
- dguido 6y ago
  iVerify looks for indicators that your phone may be running code it shouldn't be. Here's a brief overview from our initial release of the app: https://blog.trailofbits.com/2019/11/14/introducing-iverify-the-security-toolkit-for-iphone-users/ https://blog.trailofbits.com/2019/11/14/introducing-iverify-... https://www.vice.com/en_us/article/bjw474/this-app-will-tell-you-if-your-iphone-gets-hacked-iverify https://www.vice.com/en_us/article/bjw474/this-app-will-tell...
ipython 6y ago
Is iverify able to detect previous exploitation of this specific issue?
- dguido 6y ago
  We don't have precise information about the payload for the ZecOps bugs, so we can't say. The attacks profiled by Volexity earlier this week, the MobileSafari exploits that China was using to spy on Uyghurs, are now detected by iVerify. They released enough information that we pushed an update to all iVerify users to alert their phones if they were compromised. The Volexity report is here: https://www.volexity.com/blog/2020/04/21/evil-eye-threat-actor-resurfaces-with-ios-exploit-and-updated-implant/ https://www.volexity.com/blog/2020/04/21/evil-eye-threat-act...
lawnchair_larry 6y ago
Your app has a false positive if run on a previously (but no longer) jailbroken device.

by dguido 6y ago

saagarjha 6y ago

I am honestly curious what "Threat detection" from the second screenshot is supposed to do.

dguido 6y ago
iVerify looks for indicators that your phone may be running code it shouldn't be. Here's a brief overview from our initial release of the app: https://blog.trailofbits.com/2019/11/14/introducing-iverify-the-security-toolkit-for-iphone-users/ https://blog.trailofbits.com/2019/11/14/introducing-iverify-... https://www.vice.com/en_us/article/bjw474/this-app-will-tell-you-if-your-iphone-gets-hacked-iverify https://www.vice.com/en_us/article/bjw474/this-app-will-tell...

ipython 6y ago

Is iverify able to detect previous exploitation of this specific issue?

dguido 6y ago
We don't have precise information about the payload for the ZecOps bugs, so we can't say. The attacks profiled by Volexity earlier this week, the MobileSafari exploits that China was using to spy on Uyghurs, are now detected by iVerify. They released enough information that we pushed an update to all iVerify users to alert their phones if they were compromised. The Volexity report is here: https://www.volexity.com/blog/2020/04/21/evil-eye-threat-actor-resurfaces-with-ios-exploit-and-updated-implant/ https://www.volexity.com/blog/2020/04/21/evil-eye-threat-act...

lawnchair_larry 6y ago

Your app has a false positive if run on a previously (but no longer) jailbroken device.