Threats tagged 'zero-click attack'

Graphite is a sophisticated mercenary spyware developed by the Paragon group that exploits a zero-click vulnerability (CVE-2025-43200) in iOS 18.2.1 via iMessage, enabling silent device compromise without user interaction. Forensic evidence confirms targeted attacks against European journalists, threatening press freedom and digital privacy. The spyware communicates with a command-and-control server at IP 46.183.184.91 and uses a unique iMessage account, indicating a well-resourced infrastructure. The Italian government acknowledged limited use of Graphite but denied involvement in these specific attacks. The zero-click nature and stealthy operation make detection and prevention extremely difficult, risking exposure of sensitive communications and confidential sources.

KEVEPSS 1.2%Report on CVE-2025-43200Malware#mercenary spyware#iosItaly+4