From Theory to Practise - Let’s find an iOS Commercial Spyware Sample

No ratings

Presented at Objective by the Sea 2024 by

Matthias Frielingsdorf

After diving into the world of catching iOS malware with forensic analysis and exploring the methods available at last years OBTS, it’s time for some real-life action. What could be a better proof of concept than finding an actual exploit sample? Spoiler alert: we did! And as these samples become increasingly complex, analyzing them takes quite a bit of time (and maybe a few cups of coffee). But we’re finally ready to unveil the secrets of NSO’s latest BlastPass exploit sample. However, let’s not put all the blame (or spotlight) on NSO. There’s an entire zoo of iOS commercial spyware out there, each one vying for its moment of fame. In this talk, expect some comparisons, insights into the sneaky tactics these advanced spyware programs use, and the measures they take to evade our detection. It’s a wild ride through the spyware jungle, and you won’t want to miss it!