Blog | G5 Cyber Security

iOS Pegasus Vulnerability: Staying Safe

G5 Cyber Security

TL;DR

While Apple has made significant improvements to cyber security, older iOS devices *can* still be vulnerable to NSO Group’s Pegasus spyware. Newer iPhones with the latest software are much harder to infect, but keeping your device updated and practicing good digital hygiene is crucial. This guide explains how to check your risk and protect yourself.

Understanding the Risk

Pegasus is a sophisticated piece of spyware that can access messages, calls, emails, photos, location data, and more on both iPhones and Android phones. It’s typically installed without your knowledge via ‘zero-click’ exploits – meaning you don’t need to click a link or download anything. Recent versions target vulnerabilities in iMessage and FaceTime.

How to Check Your iOS Version

  1. Go to Settings: Open the ‘Settings’ app on your iPhone.
  2. Tap General: Scroll down and tap ‘General’.
  3. Tap About: Tap ‘About’.
  4. Check Software Version: Look for the ‘Software Version’ entry. iOS 17 or later is significantly more secure.

Steps to Protect Your iPhone

  1. Update iOS Immediately: This is the *most important* step.
    • Go back to ‘Settings’ > ‘General’ > ‘Software Update’.
    • If an update is available, download and install it. Ensure you have a good Wi-Fi connection and sufficient battery life.
  2. Enable Lockdown Mode (iOS 16 and later): This feature drastically reduces the attack surface.
    • Go to ‘Settings’ > ‘Privacy & Security’ > ‘Lockdown Mode’.
    • Turn it on. Be aware this will restrict some functionality, like certain website features.
  3. Review App Permissions: Limit access to sensitive data.
    • Go to ‘Settings’ > [Your App Name] (e.g., Settings > Camera).
    • Check which permissions the app has and revoke any unnecessary ones.
  4. Be Careful with Links & Messages: Even if you don’t click, be cautious of unexpected messages or links from unknown senders.
    • Avoid opening attachments from untrusted sources.
    • Report suspicious messages as spam.
  5. Use Strong Passcodes & Face ID/Touch ID: A strong passcode makes it harder for spyware to access your device if it’s compromised.
    • Go to ‘Settings’ > ‘Face ID & Passcode’ or ‘Settings’ > ‘Touch ID & Passcode’.
    • Enable a complex alphanumeric passcode.
  6. Regularly Back Up Your iPhone: In the unlikely event of infection, a backup allows you to restore your device.
    • Go to ‘Settings’ > [Your Apple ID] > ‘iCloud’ > ‘iCloud Backup’.
    • Ensure ‘iCloud Backup’ is enabled.
  7. Consider Mobile Threat Defence (MTD) Software: Some security companies offer apps that can detect and block spyware.
    • Research reputable MTD providers before installing anything.

Checking for Suspicious Activity

It’s difficult to definitively determine if you’ve been infected with Pegasus, but look out for these signs:

If you suspect infection, contact a cyber security professional for assistance.

Command Line Tools (Advanced Users)

While not a direct Pegasus detection tool, checking system logs can sometimes reveal anomalies. This requires advanced technical knowledge.

codesign -dvvv /System/Library/Frameworks/CoreTelephony.framework

Examine the output for unexpected code signatures or modifications. This is not a foolproof method and should be done by experienced users only.

Exit mobile version