Criminal spyware kits infect ordinary iPhone users at scale, iVerify says
Original title: Cybercriminals are increasingly infecting regular people with spyware
iVerify found 1.07 spyware infections per 1,000 consumer scans, mostly Coruna and DarkSword rather than mercenary tools.
Threat-hunting firm iVerify says cybercriminals are infecting consumer and employee devices with spyware at higher rates than enterprises. About 75% of detections involved Coruna or DarkSword exploit kits, used for credential and cryptocurrency theft; the rest were mercenary spyware such as Pegasus. Both kits can take over a phone after a user visits a malicious site, and infected owners did not receive Apple threat notifications, the report said.
Unconfirmed: iVerify did not disclose the exact number of consumer devices scanned.
- Consumer scans showed 1.07 infections per 1,000; enterprise scans showed 0.7.
- Hundreds of thousands of consumer devices were scanned, Cole said.
- Coruna has been linked to crypto theft from over 42,000 iOS devices.
- A December 2024 iVerify report found 2.5 Pegasus infections per 1,000 scans.
Impact: Full phone takeover, credential and cryptocurrency theft
| Product | Affected |
|---|---|
| Apple iOS | — |
- 1.Update threat models to treat spyware as a risk for all employees, not only VIPs.
- Vendors
- Apple
- Organizations
- iVerifyGoogle Threat Intelligence Group
From the original article
4 min read at therecord.mediaCybercriminals are infecting devices on a large scale with spyware, increasingly compromising systems belonging to average people, according to a new report.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.