The Exodus spyware that was recently found lurking in 25 different malicious apps on Google Play has been ported to the Apple iOS ecosystem. The surveillance package can exfiltrate contacts, take audio recordings and photos, track location data and more on mobile devices. It’s a three-stage affair, starting with a lightweight dropper that fetches a large second-stage payload that contains multiple binaries. The iOS versions had become available outside the App Store, through phishing sites that imitate Italian and Turkmenistani mobile carriers.
Source: https://threatpost.com/exodus-spyware-apple-ios/143544/