Security experts say advanced virus targeting Hong Kong protesters’ iPhones

Cybersecurity researchers have uncovered a virus that spies on Apple's iOS for the iPhone and iPad, and they believe it is targeting pro-democracy protesters in Hong Kong.

Reading Time:2 minutes

A pro-democracy demonstrator checks his phone in Hong Kong. Security experts have warned a virus may be targeting protesters in the city. Photo: AFP

Published: 12:15pm, 1 Oct 2014Updated: 5:59pm, 1 Oct 2014

Cybersecurity researchers have uncovered a computer virus that spies on Apple’s iOS operating system for the iPhone and iPad, and they believe it is targeting pro-democracy protesters in Hong Kong.

The malicious software, known as Xsser, is capable of stealing text messages, photos, call logs, passwords and other data from Apple mobile devices, researchers with Lacoon Mobile Security said on Tuesday.

They uncovered the spyware while investigating similar malware for Google's Android operating system last week that also targeted Hong Kong protesters. Anonymous attackers spread the Android spyware via WhatsApp, sending malicious links to download the program, according to Lacoon.

It is unclear how iOS devices get infected with Xsser, which is not disguised as an app. Lacoon said it had not "uncovered information regarding the method or vector of attack" but emphasised that the iOS device "needs to be jailbroken in order to be infected".

Lacoon Chief Executive Michael Shaulov told Reuters that Xsser is the most sophisticated malware used to date in any known cyberattack on iOS users.

"This is one the most interesting developments we have seen," he said. "It’s the first real indication that really sophisticated guys are shifting from infecting PCs or laptops to going after iOS devices."

The code used to control that server is written in Chinese. The high quality of the campaign and the fact it is being used to target protesters suggests that it is coming from a sophisticated attacker in China, Shaulov said.