"Apple" with a wormhole

rabiakhatun

On June 1, 2023, the Russian FSB and the Russian FSO announced that several thousand iPhones had been infected with previously unknown malware. To get onto Russian iPhones, it used software vulnerabilities provided by Apple. Russian intelligence agencies are confident that this is evidence of cooperation between the American IT company and the national intelligence community.

Following this incident, Kaspersky Lab published a report on targeted attacks on devices running iOS.

A well-known domestic antivirus manufacturer has found out that the infected file is secretly transmitted via iMessage and installs itself without user confirmation

Then begins the transfer of various information that can tell a lot about the user and his surroundings. Where do all these recordings from microphones during negotiations, secretly made content writing service videos of your surroundings, information about the location of your office, which the smartphone easily receives using GPS, go? It is impossible to know for sure. But it is obvious that Apple will hand them over to the special services of its country at the first request.




It is not surprising that the Ministry of Industry and Trade, the Ministry of Digital Development, and Rostec have already banned the use of Apple equipment for work purposes since July 17, and the Ministry of Energy is next in line.

NOT ONLY SMARTPHONES

No less dangerous are programs that the user himself grants permission to access the functionality of his smartphone. Such applications can work in the background and, for example, replace the password entry window in banking services in order to steal the password. Of course, this common problem concerns not only iPhones. But it is more difficult to detect malware on iOS smartphones than, for example, on Android devices.

If you are serious about the security of corporate data, then companies should also give up foreign messengers. WhatsApp, Viber and many other foreign messengers that are familiar to private users fall under the criteria of prohibited means of corporate communication. Large leaks of confidential data regularly occur through them. The information security service cannot ensure user protection, which is why the use of public messengers becomes too risky for companies, especially for state corporations.

Deliberate theft of corporate information by employees also remains an open problem.

You can install an antivirus and a firewall, but this is not an obstacle to copying data from messengers. There are ways to protect information in messengers, but these tools are not included in popular publicly available foreign services.