Critical severity Famous Malware

iOSpy / Pegasus-class Spyware

Zero-click commercial spyware that compromises fully patched phones through the messaging stack.

Overview

NSO Group's Pegasus used zero-click flaws in image and messaging parsers to install itself with no user interaction at all.\nThe 2021 Predator-files and Forbidden City research showed journalists and activists targeted across dozens of countries.\nLockdown Mode and rapid OS updates are the practical mitigations available to ordinary users.

Indicators of Compromise

Signals that suggest this is present on a system.

Unexpected reboots of a locked device
Kernel panic logs around image-processing daemons
Zero-day exploitation chains attributed by forensic vendors

References

Related entries

Equifax Breach Critical
WannaCry Critical
NotPetya Critical
Stuxnet Critical

Related glossary terms

CWE
Common Weakness Enumeration. A catalogue of the underlying defect class, for example CWE-8...
Zero-Day
A vulnerability being exploited before the vendor has a patch available, so defenders have...

Check your site anyway

This entry is background reading rather than a scanner check. The free scan still reports the exposures we do cover: security headers, TLS, DNS and domain reputation.

Run a free scan

← All malware