Vulnerabilitycritical
3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhone
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-41993+2 related CVEs | WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari | 8.8 group max | 24% | KEV | KEV |
| CVE-2023-4762 | Chromium V8 Type Confusion (CVE-2023-4762) Enables RCE via Crafted Web Pages | 8.8 | 41% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | almal-news.com | e following URLs: Sec-flare[.]com Verifyurl[.]me Betly[.]me almal-news[.]com chat-support[.]support cibeg[.]online notifications-sec[. |
| domain | betly.me | , any of the following URLs: Sec-flare[.]com Verifyurl[.]me Betly[.]me almal-news[.]com chat-support[.]support cibeg[.]online no |
| domain | chat-support.support | Sec-flare[.]com Verifyurl[.]me Betly[.]me almal-news[.]com chat-support[.]support cibeg[.]online notifications-sec[.]com wa-info[.]com what |
| domain | cibeg.online | url[.]me Betly[.]me almal-news[.]com chat-support[.]support cibeg[.]online notifications-sec[.]com wa-info[.]com whatssapp[.]co Wts- |
| domain | notifications-sec.com | .]me almal-news[.]com chat-support[.]support cibeg[.]online notifications-sec[.]com wa-info[.]com whatssapp[.]co Wts-app[.]info T-bit[.]me Th |
| domain | sec-flare.com | or if their device has visited, any of the following URLs: Sec-flare[.]com Verifyurl[.]me Betly[.]me almal-news[.]com chat-support[. |
| domain | t-bit.me | tions-sec[.]com wa-info[.]com whatssapp[.]co Wts-app[.]info T-bit[.]me The skill, money, and effort devoted to successfully infe |
| domain | verifyurl.me | ice has visited, any of the following URLs: Sec-flare[.]com Verifyurl[.]me Betly[.]me almal-news[.]com chat-support[.]support cibeg[ |
| domain | wa-info.com | at-support[.]support cibeg[.]online notifications-sec[.]com wa-info[.]com whatssapp[.]co Wts-app[.]info T-bit[.]me The skill, money |
| domain | whatssapp.co | upport cibeg[.]online notifications-sec[.]com wa-info[.]com whatssapp[.]co Wts-app[.]info T-bit[.]me The skill, money, and effort de |
| domain | wts-app.info | online notifications-sec[.]com wa-info[.]com whatssapp[.]co Wts-app[.]info T-bit[.]me The skill, money, and effort devoted to succes |
From the original article
9 min read at arstechnica.com
Apple patches 3 zero-days after they were used in a sophisticated attack. Apple has patched a potent chain of iOS zero-days that were used to infect the iPhone of an Egyptian presidential candidate with sophisticated spyware developed by a commercial exploit seller, Google and researchers from Citizen Lab said Friday.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.