apple iphone
apple iphone

Apple has already launched the best iPhone of 2020, the iPhone SE 2. However, millions of iPhone users now need to take extra precautions because the Company has recently confirmed a huge vulnerability to all iPhone users all over the world.

A report by ZecOps, a security firm recently shared that every iPhone running on iOS 6 or newer is endangered to remote attacks by hackers through the Mail App on iOS. This has been confirmed as true by Apple itself.

On 25 April, in an official statement, Apple represented ZecOps’ findings as being less important than in reality. Apple said:

“Apple takes all reports of security threats seriously. We have thoroughly investigated the researcher’s report and, based on the information provided, have concluded these issues do not pose an immediate risk to our users. The researcher identified three issues in Mail, but alone they are insufficient to bypass iPhone and iPad security protections, and we have found no evidence they were used against customers. These potential issues will be addressed in a software update soon. We value our collaboration with security researchers to help keep our users safe and will be crediting the researcher for their assistance.”

Read More: Apple iPhones And iPads At Risk To Hackers By Flaws In The Mail App

In response to this statement, ZecOps stands firm in its findings and reported, “According to ZecOps data, there were triggers in-the-wild for this vulnerability on a few organizations. We want to thank Apple for working on a patch, and we’re looking forward to updating our devices once it’s available. ZecOps will release more information and POCs once a patch is available.” 

According to an update on 26 April, Zuk Avraham, ZecOps CEO stated that the following are some crucial points Apple needs to address:

  • How many triggers were there for this vulnerability (both malicious and non-malicious) since iOS 6? 
  • How has Apple confirmed that all of these triggers are not malicious?
  • Following previous evidence of remote attacks happening in the wild on iOS users in multiple cases (Pegasus, Google TAG discovery, etc). Is Apple planning to improve forensics information so people will be able to analyze their devices more accurately and continuously (without a physical connection to the device)?

ZecOps has discovered a serious issue in Apple’s iOS Mail app which enables hackers to remotely contaminate an iPhone and control their inbox. In addition to this, triggers have been occurring for more than two years. The first trigger was discovered in January 2018.

Furthermore, ZecOps also found that it is easier to attack iOS 13 than previous generations of iOS. They explained this saying that for iOS 12, an Apple user is required to open the mail. However, in iOS 13, the iPhone can be attacked simply because the Mail app is open in the background.

ZecOps has issued this infographic highlighting the massive iOS iPhone vulnerability
Photo Credit: ZECOPS

Read More: Apple and Google refine plans for tech to help officials track coronavirus exposure

On the plus side, Apple has confirmed that they have managed to fix the vulnerability in the latest iOS 13.4.5 beta and it appears that the company will now release it sooner. Meanwhile, ZecOps explained two ways of staying safe, that is to disable the Mail application and use a third-party app instead.

They also discovered that Outlook and Gmail are not vulnerable to the attacks. Hence, one doesn’t need to worry. Nonetheless, Apple’s 1.5 billion active devices have been affected by this vulnerability!

Leave a Reply