Google’s Threat Analysis Group (TAG) reported that government hackers targeted iPhone users with Variston spyware using three undiscovered flaws in Apple’s operating system. SMS linkages were used to hijack Indonesian iPhones in March 2023.
Google recently reported that government hackers targeted iPhone users with malware produced by a European business last year using three undiscovered flaws in Apple’s iPhone OS.
Google’s TAG recently examined multiple government efforts using hacking tools from spyware and exploit suppliers, including Variston, a Spanish business.
In one effort, government hackers exploited three iPhone “zero-days,” which Apple was unaware of, according to Google.
Variston, a surveillance and hacking startup, built the attack tools.
Variston’s malware was analyzed by Google in 2022 and 2023.
The tech giant found a Variston customer employing zero-day flaws to attack Indonesian iPhones in March 2023.
The attackers infected the target’s phone with spyware by sending a fraudulent SMS link. The victim was then directed to a Pikiran Rakyat news item.
Variston sold spyware to an unknown party. Google claims Variston collaborates “with several other organisations to develop and deliver spyware.”
The report also stated that Google researchers are following 40 organizations that sell surveillance tools and exploits to governments worldwide.
Variston, Cy4Gate, RCS Lab, and Negg were among the report’s newer companies.
Google declared in its report that it is committed to preventing hacking utilizing these firms’ capabilities, which have been linked to targeted journalist, dissident, and political monitoring.
Conclusion
Google’s Threat Analysis Group (TAG) stated that government hackers used Variston spyware to target iPhone users using three undiscovered flaws in Apple’s operating system. In March 2023, hackers targeted Indonesian iPhones with “zero-days” vulnerabilities. Variston, a monitoring and hacking startup, was examined twice in 2022 and 2023. Google tracks 40 businesses that provide surveillance software and exploits to governments worldwide, including newcomers Variston, Cy4Gate, RCS Lab, and Negg.
