?-To The Moon - Tiger Brokers Online Investing Community

1
Comment
Favorite

Kianhui
2021-07-21

Apple was "slapped in the face": iPhone was "breached" by spyware

上周末，国外多家知名媒体共同披露了一款名为“飞马（Pegasus）”的手机间谍软件——由以色列软件监控公司 NSO 开发，用于监视记者、律师和政治家等较有影响力的人。据报道，“飞马”一旦侵入手机，就

Apple was "slapped in the face": iPhone was "breached" by spyware

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Report

Comment

Top
Latest

No comments yet

Most Discussed

{"i18n":{"language":"en_US"},"data":{"magic":2,"id":176102812,"tweetId":"176102812","gmtCreate":1626868877436,"gmtModify":1703479560667,"author":{"id":3558645402496197,"idStr":"3558645402496197","authorId":3558645402496197,"authorIdStr":"3558645402496197","name":"Kianhui","avatar":"https://static.tigerbbs.com/652dd6698826aaeab527ac64b8adf019","vip":1,"userType":1,"introduction":"","boolIsFan":false,"boolIsHead":false,"crmLevel":11,"crmLevelSwitch":0,"individualDisplayBadges":[],"fanSize":0,"starInvestorFlag":false},"themes":[],"images":[],"coverImages":[],"extraTitle":"","html":"<html><head></head><body>?</body></html>","htmlText":"<html><head></head><body>?</body></html>","text":"?","highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"favoriteSize":0,"link":"https://ttm.financial/post/176102812","repostId":2153439276,"repostType":4,"repost":{"id":"2153439276","kind":"highlight","pubTimestamp":1626868213,"share":"https://ttm.financial/m/news/2153439276?lang=en_US&edition=fundamental","pubTime":"2021-07-21 19:50","market":"us","language":"zh","title":"Apple was \"slapped in the face\": iPhone was \"breached\" by spyware","url":"https://stock-news.laohu8.com/highlight/detail?id=2153439276","media":"CSDN","summary":"上周末，国外多家知名媒体共同披露了一款名为“飞马（Pegasus）”的手机间谍软件——由以色列软件监控公司 NSO 开发，用于监视记者、律师和政治家等较有影响力的人。\n据报道，“飞马”一旦侵入手机，就","content":"Last weekend, a number of well-known foreign media jointly disclosed a mobile phone spy software named \"Pegasus\"-developed by NSO, an Israeli software monitoring company, to monitor more influential people such as journalists, lawyers and politicians.According to reports, once Pegasus invades the mobile phone, it can extract short messages, photos and e-mails, record calls, and remotely turn on the microphone and camera of the mobile phone without the user's knowledge, posing a great threat to the user's privacy. The invasion scope of Pegasus is all over more than 50 countries around the world, and the number of people who may be monitored is as high as 50,000.The iPhone, which has always been known for its \"security\", has also been \"breached\" this time: According to the foreign organization Amnesty International,Even the iPhone 12 with iOS 14.6 system, \"Pegasus\" can be invaded without even clicking on the link。1. iMessage vulnerability becomes a breakthrough for \"Pegasus\"As mentioned at the beginning, NSO, the developer of Pegasus, is a software monitoring company that mainly sells software to government agencies and law enforcement agencies, claiming to combat terrorism, car bombings, drug trafficking and other criminal acts.The reason why NSO's \"Pegasus\" spyware caused an uproar in the world is that the analysis found that \"Pegasus\" monitored the whereabouts of people from all walks of life all over the world: in the list of 50,000 potential monitored numbers of \"Pegasus\", the users of more than 1,000 numbers have been confirmed, including 189 journalists, more than 600 politicians and government officials, 65 business executives, 85 famous human rights activists and many heads of state and prime ministers.Generally speaking, this kind of spyware will send a malicious link to users that is \"caught\" by clicking, so users can effectively avoid such hidden dangers as long as they don't click on unknown links. However, investigation experts found that the current \"Pegasus\" is obviously an upgraded version-Even if the user doesn't click on the link, \"Pegasus\" can invade the target's mobile phone unnoticed and carry out various spy monitoring activities。 As a result, the Guardian believes that Pegasus may be the \"strongest spyware\" yet: once successfully installed, the phone becomes a \"24-hour surveillance device\".Thousands of iPhones have been listed as potential targets of \"Pegasus\" after testing and investigation by Amnesty International, but it is currently impossible to confirm how many have been successfully hacked. But Danna Ingleton, deputy director of technology at Amnesty International, thinks this is serious enough: \"Thousands of iPhones may have been compromised. This is a global problem-everyone is at risk, even people like<a href=\"https://laohu8.com/S/AAPL\">Apple</a>Such tech giants can't cope with the current mass surveillance either. \"Although there are many ways to hack iPhone, most of these experts agree that,The iPhone, which has always been called \"safe\", has one of the biggest vulnerabilities: iMessage。Ironically, Apple also tried to strengthen the security of iMessage earlier this year, creating a feature called BlastDoor to screen and eliminate suspicious information entering the phone. At present, it seems that this measure does not guarantee the safety of iPhone users.In this regard, Bill Marczak, a researcher at Citizen Lab, a cybersecurity analyst unit at the University of Toronto, said: \"'Pegasus' can hack Apple's latest version of iOS through iMessage, so it is clear that NSO beat BlastDoor.\"Patrick Wardle, founder of Mac security development company Objective-See, also believes that the security features that Apple has always been proud of are a double-edged sword: \"iMessage is end-to-end encrypted, which means that no one will find the vulnerabilities you introduce. For attackers, this is simply an excellent intrusion environment.\"This opaque system makes it difficult for researchers to check the inside of the iPhone. \"Unless you are particularly unlucky, the software that the attacker implanted on the phone will not be found at all,\" Patrick Wardle added.2. Apple condemns \"Pegasus\", NSO completely denies itIn response to this matter, while emphasizing the security of iPhone, Apple also publicly condemned the cyber attacks of Pegasus: \"Apple explicitly condemns cyber attacks against journalists, human rights activists and others who seek to make the world a better place. For more than a decade, Apple has been an industry leader in security innovation. Therefore, security researchers agree that the iPhone is the safest mobile device on the market.\"In addition, Apple believes that the attacks of spyware such as \"Pegasus\" are very sophisticated, and the development cost should cost millions of dollars, so the \"shelf life\" is usually short and targets specific individuals.Does not pose a threat to the vast majority of Apple users。 However, Apple also said: \"We will continue to work hard to protect all customers and constantly add new protection measures to their devices and data.\"At the same time, NSO, the development company of Pegasus, completely denied this matter, accusing various media reports of being \"full of false assumptions and unproven theories\", reprimanding them for \"exaggerating\" and \"lacking factual basis\", and questioning the reliability and authenticity of their information sources. NSO also issued a statement for this purpose: \"'Pegasus' is software specially designed to fight criminals and terrorists. We will only sell 'Pegasus' to military, law enforcement and intelligence agencies with good human rights records.\"3. Confirm whether the mobile phone is monitored by \"Pegasus\"Although, as Apple said, \"Pegasus\" does not pose a threat to most ordinary users, Amnesty International has developed a tool called Mobile Verification Toolkit (MVT) to help users confirm whether their mobile phones have been hit by \"Pegasus\". \"Monitoring is currently available for Android and iOS systems. However, Amnesty International adds that MVT detects iPhones more accurately.(MVT's GitHub address: https://github.com/AmnestyTech/investigations/tree/master/2021-07-18 _ nso)According to reports, MVT will allow users to get the whole iPhone backup (if your phone is jailbroken, a complete system dump), and once the program is started, MVT will scan the user's iPhone backup file for any evidence of intrusion. The process takes about a minute or two and then several files are generated in the folder containing the results of the scan. If MVT finds signs that the mobile phone is suspected of being invaded, it will explain it in the output file.However, it needs to be emphasized that the test results of MVT are not 100% accurate, and there may be \"false positives\".","source":"lsy1578046468581","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple was \"slapped in the face\": iPhone was \"breached\" by spyware</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 12.5px; color: #7E829C; margin: 0;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple was \"slapped in the face\": iPhone was \"breached\" by spyware\n</h2>\n<h4 class=\"meta\">\n\nCSDN2021-07-21 19:50\n\n</h4>\n</header>\n<article>\nLast weekend, a number of well-known foreign media jointly disclosed a mobile phone spy software named \"Pegasus\"-developed by NSO, an Israeli software monitoring company, to monitor more influential people such as journalists, lawyers and politicians.According to reports, once Pegasus invades the mobile phone, it can extract short messages, photos and e-mails, record calls, and remotely turn on the microphone and camera of the mobile phone without the user's knowledge, posing a great threat to the user's privacy. The invasion scope of Pegasus is all over more than 50 countries around the world, and the number of people who may be monitored is as high as 50,000.The iPhone, which has always been known for its \"security\", has also been \"breached\" this time: According to the foreign organization Amnesty International,Even the iPhone 12 with iOS 14.6 system, \"Pegasus\" can be invaded without even clicking on the link。1. iMessage vulnerability becomes a breakthrough for \"Pegasus\"As mentioned at the beginning, NSO, the developer of Pegasus, is a software monitoring company that mainly sells software to government agencies and law enforcement agencies, claiming to combat terrorism, car bombings, drug trafficking and other criminal acts.The reason why NSO's \"Pegasus\" spyware caused an uproar in the world is that the analysis found that \"Pegasus\" monitored the whereabouts of people from all walks of life all over the world: in the list of 50,000 potential monitored numbers of \"Pegasus\", the users of more than 1,000 numbers have been confirmed, including 189 journalists, more than 600 politicians and government officials, 65 business executives, 85 famous human rights activists and many heads of state and prime ministers.Generally speaking, this kind of spyware will send a malicious link to users that is \"caught\" by clicking, so users can effectively avoid such hidden dangers as long as they don't click on unknown links. However, investigation experts found that the current \"Pegasus\" is obviously an upgraded version-Even if the user doesn't click on the link, \"Pegasus\" can invade the target's mobile phone unnoticed and carry out various spy monitoring activities。 As a result, the Guardian believes that Pegasus may be the \"strongest spyware\" yet: once successfully installed, the phone becomes a \"24-hour surveillance device\".Thousands of iPhones have been listed as potential targets of \"Pegasus\" after testing and investigation by Amnesty International, but it is currently impossible to confirm how many have been successfully hacked. But Danna Ingleton, deputy director of technology at Amnesty International, thinks this is serious enough: \"Thousands of iPhones may have been compromised. This is a global problem-everyone is at risk, even people like<a href=\"https://laohu8.com/S/AAPL\">Apple</a>Such tech giants can't cope with the current mass surveillance either. \"Although there are many ways to hack iPhone, most of these experts agree that,The iPhone, which has always been called \"safe\", has one of the biggest vulnerabilities: iMessage。Ironically, Apple also tried to strengthen the security of iMessage earlier this year, creating a feature called BlastDoor to screen and eliminate suspicious information entering the phone. At present, it seems that this measure does not guarantee the safety of iPhone users.In this regard, Bill Marczak, a researcher at Citizen Lab, a cybersecurity analyst unit at the University of Toronto, said: \"'Pegasus' can hack Apple's latest version of iOS through iMessage, so it is clear that NSO beat BlastDoor.\"Patrick Wardle, founder of Mac security development company Objective-See, also believes that the security features that Apple has always been proud of are a double-edged sword: \"iMessage is end-to-end encrypted, which means that no one will find the vulnerabilities you introduce. For attackers, this is simply an excellent intrusion environment.\"This opaque system makes it difficult for researchers to check the inside of the iPhone. \"Unless you are particularly unlucky, the software that the attacker implanted on the phone will not be found at all,\" Patrick Wardle added.2. Apple condemns \"Pegasus\", NSO completely denies itIn response to this matter, while emphasizing the security of iPhone, Apple also publicly condemned the cyber attacks of Pegasus: \"Apple explicitly condemns cyber attacks against journalists, human rights activists and others who seek to make the world a better place. For more than a decade, Apple has been an industry leader in security innovation. Therefore, security researchers agree that the iPhone is the safest mobile device on the market.\"In addition, Apple believes that the attacks of spyware such as \"Pegasus\" are very sophisticated, and the development cost should cost millions of dollars, so the \"shelf life\" is usually short and targets specific individuals.Does not pose a threat to the vast majority of Apple users。 However, Apple also said: \"We will continue to work hard to protect all customers and constantly add new protection measures to their devices and data.\"At the same time, NSO, the development company of Pegasus, completely denied this matter, accusing various media reports of being \"full of false assumptions and unproven theories\", reprimanding them for \"exaggerating\" and \"lacking factual basis\", and questioning the reliability and authenticity of their information sources. NSO also issued a statement for this purpose: \"'Pegasus' is software specially designed to fight criminals and terrorists. We will only sell 'Pegasus' to military, law enforcement and intelligence agencies with good human rights records.\"3. Confirm whether the mobile phone is monitored by \"Pegasus\"Although, as Apple said, \"Pegasus\" does not pose a threat to most ordinary users, Amnesty International has developed a tool called Mobile Verification Toolkit (MVT) to help users confirm whether their mobile phones have been hit by \"Pegasus\". \"Monitoring is currently available for Android and iOS systems. However, Amnesty International adds that MVT detects iPhones more accurately.(MVT's GitHub address: https://github.com/AmnestyTech/investigations/tree/master/2021-07-18 _ nso)According to reports, MVT will allow users to get the whole iPhone backup (if your phone is jailbroken, a complete system dump), and once the program is started, MVT will scan the user's iPhone backup file for any evidence of intrusion. The process takes about a minute or two and then several files are generated in the folder containing the results of the scan. If MVT finds signs that the mobile phone is suspected of being invaded, it will explain it in the output file.However, it needs to be emphasized that the test results of MVT are not 100% accurate, and there may be \"false positives\".\n<div class=\"bt-text\">\n\n\n source：<a href=\"https://www.huxiu.com/article/442749.html\">CSDN</a>\n\n\n</div>\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"https://static.tigerbbs.com/566a41f1b3e25a62a4a31ef527df0ac4","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.huxiu.com/article/442749.html","is_english":false,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2153439276","content_text":"上周末，国外多家知名媒体共同披露了一款名为“飞马（Pegasus）”的手机间谍软件——由以色列软件监控公司 NSO 开发，用于监视记者、律师和政治家等较有影响力的人。\n据报道，“飞马”一旦侵入手机，就可以在使用者不知情的情况下，提取短信、照片、电子邮件，对通话进行录音，远程开启手机的麦克风和摄像头，对用户隐私造成极大威胁。此次“飞马”的入侵范围更是遍布全球 50 多个国家，可能被监控人数高达 5 万。\n而一向以“安全”著称的 iPhone 这次也被“攻破”了：据国外机构 Amnesty International 发现，哪怕是 iOS 14.6 系统的 iPhone 12，“飞马”都可以入侵，甚至都不需要点击链接。\n一、iMessage 漏洞成“飞马”的突破口\n如开头所说，“飞马”的开发商 NSO 是一家软件监控公司，主要向政府机构、执法部门出售软件，号称以此打击恐怖主义、汽车爆炸及贩毒等犯罪行为。\n之所以此次 NSO 的“飞马”间谍软件会在国际引起轩然大波，是因为分析发现，“飞马”监控了全球各界人士的行踪：在“飞马”的 5 万个潜在被监控者号码清单中，1000 多个号码的使用者身份已确认，其中包括 189 名记者、600 多名政界人士和政府官员、65 名企业高管、85 名著名人权活动家和多位国家元首及总理。\n一般来说，这种间谍软件都会向用户发送一条点击即“中招”的恶意链接，因此用户只要不点击未知链接就能有效避免此类隐患。但调查专家发现，目前的“飞马”显然是升级版本——即使用户不点击链接，“飞马”依旧可以神不知鬼不觉地入侵目标对象的手机，进行各种间谍监控活动。因此，《卫报》认为“飞马”可能是迄今为止“最强的间谍软件”：一旦成功安装，手机就会成为“24 小时监控设备”。\n经 Amnesty International 测试调查，有数千部 iPhone 被列为“飞马”的潜在目标，但目前无法确认具体有多少已被成功入侵。但 Amnesty International 技术部门副主任 Danna Ingleton 认为这已足够引起重视：“数以千计的 iPhone 可能已遭到入侵。这是一个全球性的问题——每个人都面临风险，甚至像苹果这样的科技巨头也无法应对目前的大规模监控。”\n虽然入侵 iPhone 的途径有多种，但其中大多数专家都认为，向来号称“安全”的 iPhone 有一个最大的漏洞：iMessage。\n讽刺的是，苹果今年早些时候还曾试图加强 iMessage 的安全性，创建了一个名为 BlastDoor 的功能，以筛选摒除进入手机的可疑信息。目前看来，这个举措并没有保障 iPhone 用户的安全。\n对此，多伦多大学网络安全分析师部门 Citizen Lab 的研究员 Bill Marczak 说：“'飞马'可通过 iMessage 入侵苹果最新版本的 iOS，所以很明显 NSO 击败了 BlastDoor。”\nMac 安全开发公司 Objective-See 创始人 Patrick Wardle 也认为苹果一直引以为豪的安全功能是一把双刃剑：“iMessage 是端到端加密的，这就意味着没有人会发现你引入的漏洞，对攻击者而言这简直就是绝佳的入侵环境。”\n这种不透明的制度令研究人员很难检查 iPhone 的内部情况。“除非特别不走运，不然攻击者植入在手机上的软件根本不会被发现。”Patrick Wardle 补充道。\n二、苹果谴责“飞马”，NSO 全盘否认\n针对此事，苹果在强调 iPhone 安全性的同时，还公开谴责了“飞马”的网络攻击行为：“苹果明确谴责针对记者、人权活动家和其他寻求让世界变得更美好的人的网络攻击。十多年来，苹果在安全创新方面一直处于行业领先地位，因此，安全研究人员一致认为 iPhone 是市场上最安全的移动设备。”\n此外，苹果认为“飞马”这类间谍软件的攻击非常复杂，开发成本应需数百万美元，因此“保质期”通常较短，并且针对特定的个人，不会对绝大多数的苹果用户造成威胁。不过苹果也表示：“我们将继续努力保护所有客户，不断为他们的设备和数据添加新的保护措施。”\n与此同时，“飞马”的开发公司 NSO 却对此事全盘否认，指控各家媒体的报道“充满错误的假设和未经证实的理论”，斥责他们“夸大其词”、“缺乏事实依据”，质疑他们信息来源的可靠性和真实性。NSO 为此还发布了一则声明：“‘飞马’是专门用于对抗罪犯和恐怖分子的软件，我们只会把‘飞马’出售给那些有良好人权记录的军方、执法和情报部门。”\n三、确认手机是否被“飞马”监听\n虽然如苹果所说，“飞马”不会对大多数普通用户构成威胁，但 Amnesty International 还是为此开发了名为 Mobile Verification Toolkit（MVT）的工具，以帮助用户确认自己的手机是否遭到了“飞马”的监听，目前适用于 Android 和 iOS 系统。不过 Amnesty International 补充道，MVT 对  iPhone 的检测更为准确。\n（MVT 的 GitHub 地址：https://github.com/AmnestyTech/investigations/tree/master/2021-07-18_nso）\n据介绍，MVT 将让用户获取整个 iPhone 备份（如果你的手机越狱，则进行完整的系统转储），而一旦启动程序，MVT 就会扫描用户的 iPhone 备份文件以查找任何被入侵的证据。这个过程大约需要一两分钟，然后在文件夹中生成几个文件，其中包含扫描结果。如果 MVT 发现手机疑似被入侵的迹象，会在输出的文件中说明。\n不过需要强调一点，MVT 的检测结果并非百分百准确，也会有“误报”的可能。","news_type":1,"symbols_score_info":{"AAPL":0.9}},"isVote":1,"tweetType":1,"viewCount":2166,"commentLimit":10,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"symbols":[],"verified":2,"subType":0,"readableState":1,"langContent":"EN","currentLanguage":"EN","warmUpFlag":false,"orderFlag":false,"shareable":true,"causeOfNotShareable":"","featuresForAnalytics":[],"commentAndTweetFlag":false,"andRepostAutoSelectedFlag":false,"upFlag":false,"length":1,"xxTargetLangEnum":"ORIG"},"commentList":[],"hasMoreComment":false,"orderType":2}