37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchers - traduction frança

"Join us as we explore Operation Triangulation, a sophisticated attack on iPhone researchers, recovered by Kaspersky, and discover the techniques and mistakes made by relatively inexperienced attackers."

Key takeaways
  • Operation Triangulation was an attack on iPhone researchers, resulting in the recovery of all associated attacks.
  • The attack used a combination of techniques, including execution code at a distance, bypass of pack, kernel vulnerability, and attacker vulnerability.
  • The attack’s sophistication was highlighted, with it being one of the most complex attacks discovered by Kaspersky.
  • The story of the attack starts with the researchers discovering an attack on a colleague’s iPhone.
  • High outbound traffic was observed, and the attackers did their best to benefit from their mistakes.
  • The attackers were identified as being relatively inexperienced, with some being university students in the field of security.
  • The attack was discovered by Kaspersky, who worked with researchers to analyze and recover the attacks.
  • The researchers used a specific resource to detect the activity suspect on Appare’s mobile device.
  • The researchers also worked together to analyze and present the findings of the attack.