iPhone spyware campaigns exploit ad infrastructure, target crypto credentials

Researchers at iVerify and Report URI uncovered two campaigns where criminal groups with suspected ties to China exploit online advertising and legitimate websites to deliver iPhone spyware without user interaction. This marks a shift from state-sponsored targeting of high-value individuals to broader criminal use aimed at stealing cryptocurrency and login credentials. The full scope and attribution remain uncertain, but the expansion of zero-click spyware to everyday cybercrime signals a significant escalation in threat landscape.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works