iPhone users warned that scrolling past ads can allow hackers to access phone, steal data
Key Points:
- Security researchers have identified two spyware attacks targeting iPhone users who have not updated their operating systems, with infections occurring simply by scrolling past an ad or visiting legitimate websites.
- The attacks exploit vulnerabilities in online advertising infrastructure and expired website domains, allowing spyware to be installed without users actively visiting malicious sites.
- One scam infects phones when users scroll past ads, such as Instagram ads, stealing login credentials and cryptocurrency wallet information, while the other redirects visitors from legitimate sites using expired domains purchased by hackers.
- These schemes are linked to criminal groups suspected of connections to China and specifically check for vulnerable iPhone operating systems before launching attacks.
- Experts strongly advise iPhone users to update their operating systems promptly to protect against these threats, with Apple having already released patches to fix the vulnerabilities.