NSO used shared infrastructure to launch the attack, some of which had other domains with WHOIS info that revealed them as true owners.
-
The lack of exploit analysis skill has consequences. No IOCs for pre-compromise detections. You have to wait until you get 0wned to find it.
People wondering why I'm not surprised: Amateurs produce iOS jailbreaks once a year (Pangu et al). Professionals won't be any less skilled.
-
-
People asking abt iOS10: Unlikely that existing toolkit works out of the box on 10. Even if underlying vulns still present, kit prob broken.
-
Absolutely true. 9.3.5 protects you from NSO customers, and expected copycat attacks once exploits become public. iOS10 more meaningful.
- 5 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.