SlowMist CISO: Underground forum hawking remote control tool claimed to support iOS 13 through 27.2

Odaily reports: SlowMist CISO 23pds says that someone on an underground forum is selling a remote control tool that claims to support iOS 13 through 27.2 systems and comes with a centralized control panel. It is said that attackers can send phishing links via SMS, chat apps, or email; after a user clicks, the attacker will attempt to gain device access and steal keychain data, chat records, file credentials, and crypto wallet-related data. The tool also claims to support monitoring the camera, microphone, location, and screen, as well as a remote shell and multi-device management; its six capabilities include initial access, privilege escalation, persistence after reboot, data exfiltration, real-time monitoring, and remote control, and involve techniques such as bypassing Pointer Authentication (PAC), sandbox escape, and obtaining kernel read/write permissions.