Apple Patches Zero-Days Used in Triangulation Spyware Attack on iOS Devices

Kaspersky has discovered a spyware implant called TriangleDB that is delivered to iOS devices via zero-click exploits as part of a campaign called Operation Triangulation. The malware has a lifespan of 30 days and is automatically uninstalled unless the attackers extend the time period. The implant is deployed after the attackers obtain root privileges on the target iOS device by exploiting a kernel vulnerability. The spyware gives complete control over the device and user data, including file contents, geolocation, installed iOS applications, and running processes. It's currently not known who is behind the campaign and what their ultimate objectives are.