On Thursday, Google Project Zero posted a notice: "Earlier this year Google's Threat Analysis Group (TAG) discovered a small collection of hacked websites. The hacked sites were being used in indiscriminate watering hole attacks against their visitors, using iPhone 0-day."
Wired reports the issue was identified on February 1, 2019 and supposedly fixed by Apple on February 7, 2019 with the iOS 12.1.14 patch. This is interesting for a couple reasons: 1) there is a popular belief that Apple products are not vulnerable to viruses or hackers, and 2) most people believe that it is expensive to hack an iPhone -- even the FBI needed to hire outside consultants -- so victims must be high-value and carefully selected. As it turns out, neither of these popular assumptions are correct.
Continue Reading →