13 iPhones Users targeted by attackers using MDM Malware!
A Campaign active since August 2015 which had been using MDM Protocol to spy on 13 iPhone users in India was recently uncovered by security researchers. The attackers who were posing to be Russians were most probably operating from India.
MDM or Mobile Device Management Protocol is security software which is utilized by large companies or enterprises to monitor and control policies on the devices used by the members of the workforce. The MDM protocol was being used to dispatch and regulate new applications via remote access.
The MDM protocol is connected with the Apple Push notification service (APNS) to manage the connected device by sending a wake-up alert on the device. Once the device is linked, it connects to a pre determined web service that can be used for giving out commands or installing apps and services on the targeted device.
The security researchers were unable to find out how the cyber attackers succeeded in installing the MDM Malware into the 13 iPhones. It is because the enrollment process of the MDM protocol can be done only through user interaction. Other then tricking the users into installing the malicious MDM Protocol into their devices the researchers have still been unable to understand how the devices were infected.
MDM protocol can be delivered on the device using email attachments or over-the-air enrollment service using Apple configurator.
This service is used by companies to control the devices, install/uninstall apps, lock the device, change passwords, revoke/install certificates. All this can be done through remote access.
Comments
Post a Comment