Will Apple’s Lockdown Mode Finally Kill Pegasus Spyware?


Techlicious editors independently review products. To help support our mission, we may earn affiliate commissions from links contained on this page.

While not immune to hacking, owners of Apple’s iPhone are largely pretty well protected from malware threats. However, Israel’s NSO Group has been marketing software to governments and law enforcement agencies around the world with the demonstrated ability to hack and remotely spy on almost any iPhone. And while NSO claims that it only licenses the software to “exclusively fight crime and terror,” NSO has licensed the software to countries with dubious human rights records, and numerous examples have been discovered of Pegasus being used to spy on journalists, politicians, and political dissidents.

Apple has been in an ongoing technical and legal battle to prevent NSO Group from continuing its breach of Apple devices, with limited success to date. So, in an effort to finally stamp out the Pegasus threat (and, presumably, other similar spyware produced by cybersecurity companies and government spy agencies), Apple is rolling out a new security feature called “Lockdown Mode” that will offer users what Apple describes as “extreme” protection for those users who need it.

Screenshot of iOS 16 Lockdown Mode screen. The text reads: Lockdown Mode is an extreme, optional protection that should only be used if you believe you may be personally targeted by a highly sophisticated cyberattack. Most people are never targeted by attacks of this nature.  When iPhone is in Lockdown Mode, it will not function as it typically does. Apps, websites, and features will be strictly limited for security, and some experiences will be completely unavailable.

Rolling out in iOS 16, iPadOS 16, and macOS Ventura this fall, Lockdown Mode will cut off the known attack vectors used to compromise iOS devices. Via Apple:

  • Messages: Most message attachment types other than images are blocked. Some features, like link previews, are disabled.
  • Web browsing: Certain complex web technologies, like just-in-time (JIT) JavaScript compilation, are disabled unless the user excludes a trusted site from Lockdown Mode.
  • Apple services: Incoming invitations and service requests, including FaceTime calls, are blocked if the user has not previously sent the initiator a call or request.
  • Wired connections with a computer or accessory are blocked when iPhone is locked.
  • Configuration profiles cannot be installed, and the device cannot enroll into mobile device management (MDM), while Lockdown Mode is turned on.

Apple says it will add additional enhancements in the future but did not provide any specifics. Apple is also increasing its bug bounty program up to a maximum of $2,000,000 for researchers who find vulnerabilities in Lockdown Mode.

While Lockdown Mode will be available to anyone who owns an Apple device running the OS updates, it significantly reduces the functionality of your device. It should only be used by those who have a realistic risk of being the target of sophisticated government monitoring. Most normal users will be well-protected by following the standard steps for keeping your phone secure and using a password manager to ensure that you are using unique and secure logins for all your accounts, especially your Apple ID and email accounts.

[Image credit: Apple, smartphone spyware concept via BigStockPhoto]

Josh Kirschner is the co-founder of Techlicious and has been covering consumer tech for more than a decade. Josh started his first company while still in college, a consumer electronics retailer focused on students. His writing has been featured in Today.com, NBC News and Time.





Source link

Previous articleInstagram expands subscriber features to include DMs, Reels
Next articleThe Technology Lab Podcast – Review of Zoho Expense – July 2022