iMessage Zero-Click Attack Infects iPhones in Ongoing APT Campaign

Kaspersky researchers have discovered an ongoing attack campaign exploiting a zero-click, zero-day iMessage vulnerability that enables code-execution and installs spyware. The attack requires no user interaction and has been named Operation Triangulation. The Russian FSB security service has accused Apple and the U.S. National Security Agency (NSA) of being behind the attacks, something that Apple has denied. Kaspersky has released a ‘Triangle Check’ tool to look for evidence of compromise on devices. It is recommended to update to the latest iOS version to mitigate the exploit.