BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild - The Citizen Lab
citizenlab.ca
Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.
      • Drunemeton@lemmy.worldEnglish
        6·
        1 year ago

        Settings > Messages > SMS/MMS > MMS Messaging (uncheck)

        And/Or

        Message Filtering > Filter Unknown Senders (checked)

        Those seem to be the likely options, but I’ve zero idea if those will work.

    • mishimaenjoyer@kbin.social
      12·
      1 year ago

      at this point most iphone users are very much used to reicive images within imessage and have already forgotten that mms existed or are too young to actually ever had to deal with it, so to them it’s just yet another picture.

        • Ado@lemmy.world
          4·
          1 year ago

          lol, even if people went through to change their defaults, why would they expect an image to be able to hijack their device?

          There’s so many automated things on smart phones nowadays, should we disable everything to ensure avoiding future exploits?

          • Dontfearthereaper123@lemm.ee
            21·
            1 year ago

            They would expect an image to hijack their device because they’ve been warned about downloading attachments in basically every Internet safety anything. We should disable things like nfc and other security vulnerabilities when not in use, it doesn’t take a genius to figure out which can be dangerous.