Re: Disable iMessage NOW! (Trust Wallet Warns iOS Users About New iMessage Zero-Day Vulnerabilities)

On Fri, 19 Apr 2024 17:00:57 +0100, Chris wrote:

Non-hacker news has recently been reporting that it could be a false alarm.
https://www.androidheadlines.com/2024/04/iphone-users-warned-about-imessage-exploit-but-it-could-be-fake.html

 
These are all reporting on the Trust Wallet story. That's not a flood,
just an echo.

While I disagree with the user who thinks this is all about the M1 flaws,
I agree with you that initially, it was widely reported to be so bad that
all iOS users were suggested to disable the app to prevent being hacked.

You have to take these seriously because iMessage is frequently hacked.
https://www.bleepingcomputer.com/news/security/apple-zero-click-imessage-exploit-used-to-infect-iphones-with-spyware/

These iMessages zero-day holes are so frequent, that you have to take them
at face value, as almost every one that is reported turns out to be true.
https://www.forbes.com/sites/daveywinder/2023/06/02/warning-issued-for-iphone-users-as-ongoing-imessage-0-click-attack-revealed/

Apple is never going to be the first to let you know about its holes, and,
in fact, Apple doesn't tell you iOS iMessages holes are on the rise.
https://www.nbcnews.com/tech/security/apple-iphone-security-update-points-growing-problem-zero-days-rcna2012

Apple has historically been the last entity to tell users anything about
its many iMessages flaws, all of which are due to Apple's lack of testing.
https://www.macworld.com/article/227626/imessage-security-flaw-faq.html

In this case, the news for days was that iMessages was so seriously broken
that users around the world were told to completely disable it in settings.
https://cointelegraph.com/news/apple-ios-imessage-zero-day-crypto-exploit-warning-trust-wallet

Then, slowly, the news started to report that, while the initial evidence
of the $2 million dollar hack is correct - it may be a false alarm.
https://appleinsider.com/articles/24/04/18/exploit-seller-wants-2-million-for-a-zero-day-imessage-attack-vector-that-probably-doesnt-exist

All we can do now is wait to see whether the advertised $2M hack is real.
Or not.