Experts have discovered the first iOS trojan, named “GoldDigger,” posing a substantial threat to Apple Inc.’s AAPL iPhone and iPad users, marking a significant breach in Apple’s traditionally robust security measures.
What Happened: Cybersecurity firm Group-IB has revealed that the GoldDigger trojan is designed to pilfer facial recognition data and leverage AI-generated deepfakes to access victims’ bank accounts, representing a nefarious convergence of technology and criminal endeavors.
Originally tailored for Android, the GoldDigger trojan has now been adapted to target iPhone and iPad users, signifying a troubling escalation in cybersecurity threats for Apple’s mobile ecosystem. The trojan’s capabilities include the surreptitious collection of facial recognition data, ID documents, and SMS, heightening the potential for systematic bank theft.
Hackers are exploiting this data to produce AI-driven deepfake replicas, enabling them to exploit victims’ bank accounts, adding a nightmarish dimension to the already perilous landscape of data security.
In a disconcerting development, the trojan was initially disseminated via Apple’s TestFlight, only to reappear through a more sophisticated channel using a Mobile Device Management (MDM) profile, underscoring the adaptive nature of the threat.
See Also: Americans’ Love Affair With iPhone Grows Stronger: 1 In 8 Android Users Switched To Apple In 2023
This profile enables hackers to induce users into installing a pernicious profile to download an app from outside the App Store, effectively enabling the surreptitious collection of crucial user data, elevating the urgent need for heightened vigilance among Apple users.
Group-IB warns that GoldDigger primarily targets users in Vietnam and Thailand, though the potential for global infiltration exists, casting a menacing shadow over Apple’s international user base.
Crucially, the trojan is in an “active stage of evolution,” with even the latest iterations of iOS and iPadOS being susceptible to its pernicious activities. While Apple has been alerted to the threat, users are left in a precarious position, awaiting the development of a protective solution from the tech giant.
Why It Matters: Situating this alarming revelation within historical context, it becomes evident that Apple’s security has encountered recurrent breaches. Notably, the NSO Group successfully exploited an iPhone ‘Zero Click’ vulnerability in December 2020, raising concerns of a pervasive and persistent vulnerability within the hardened confines of the iPhone’s security architecture.
Elsewhere, Apple’s iPhones were covertly compromised for an extensive four-year period through the deployment of the “most sophisticated attack chain” observed by cybersecurity researchers at Kaspersky, prompting a reckoning with the necessity for an uncompromising commitment to robust cybersecurity measures.
Check out more of Benzinga’s Consumer Tech coverage by following this link.
Read Next: iPhone’s Decline In China Continues In 2024 Despite Apple’s Recent Price Cuts: Kuo
Disclaimer: This content was partially produced with the help of Benzinga Neuro and was reviewed and published by Benzinga editors.
Photo courtesy: TheRegisti on Unsplash
