Apple and Google have issued cyber threat notifications to users around the world, warning those who may have been targeted by state-sponsored hackers.
The tech giants are among several other companies sending regular alerts to users who may have been targeted in state-sponsored spyware attacks.
On December 3rd, Google announced that it sent out warnings to all known users targeted by Intellexa spyware, spanning “several hundred accounts across various countries, including Pakistan, Kazakhstan, Angola, Egypt, Uzbekistan, Saudi Arabia, and Tajikistan.”
Google says that Intellexa, a company sanctioned by the US Government, “has solidified its position as one of, if not the most, prolific spyware vendors exploiting zero-day vulnerabilities against mobile browsers.”
It adds that despite regular patches and security upgrades, Intellexa demonstrates an ability to procure or develop new zero-day exploits, which allows it to continue “evading restrictions and thriving.”
Many of the zero-day vulnerabilities identified over the years by Google’s Threat Analysis Group (TAG) are attributed to Intellexa, which is also purchasing steps of exploit chains from external entities.
Apple has confirmed to Reuters that it sent out threat notifications on December 2nd, although it didn’t provide many details about the alleged hacking activity, the number of impacted users, or who was behind the surveillance.
However, the company said that "to date, we have notified users in over 150 countries in total."
In the past, such notifications prompted investigations from government bodies, including the European Union. Although Apple and Google rarely disclose which specific users receive the alerts, it’s speculated that these hacking campaigns tend to disproportionately affect individuals from high-risk groups, such as journalists, activists, political figures, or people whose profiles make them attractive targets for governments or commercial spyware vendors.
Your email address will not be published. Required fields are markedmarked