Desk Report: A new version of the ‘LightSpy’ spyware has been uncovered by Dutch cybersecurity firm ThreatFabric, which can not only collect data but also render iPhones completely inoperable.
According to the firm, this spyware, specifically designed for iPhones, is significantly more powerful than its previous iterations.
LightSpy can silently infiltrate an iPhone when users visit certain websites created by cybercriminals.
This allows hackers to collect sensitive information without users’ knowledge and remotely disable specific devices.
According to ThreatFabric, the iOS version of LightSpy can gather a wide range of data, including information about the infected device’s Wi-Fi network, screenshots, location, iCloud data, audio recordings, photos, internet browsing history, phone numbers, call logs, and messaging data.
It can even erase messages or phone numbers from the iPhone, as well as extract information from applications like Telegram, WeChat, and WhatsApp.
The spyware exploits a WebKit vulnerability to gain access to the iPhone through a file with a .png extension.
Once inside, it downloads the core spyware module and other plugins through a component called “FrameworkLoader.”
These modules and plugins create separate folders to store various types of data from the iPhone and continuously send this information back to the cybercriminals.