Apple releases urgent update after spying malware uncovered

The Trident Mac hack could turn desktops into spying devices

Apple has issued an urgent security update to Mac desktop and laptops running on OS X El Capitan and Yosemite following the discovery of a vulnerability that could transform devices into spying tools.

The hack has been described as the "most sophisticated spyware" ever seen and is accessed by the user clicking on a malicious link in the Safari web browser. This link triggers spyware called "Pegasus" to start running, which can then use a flaw in the machine's OS X software to run two other exploits. These allow access to the computer's kernel, which means the criminal can view everything, from bank details, their current location and more.

Apple's security notes page recommends all users of Macs running on El Capitan or Yosemite install the update, Security Update 2016-001 for El Capitan and Security Update 2016-005 for Yosemite as soon as they can.

The Safari browser has also been patched to stop criminals using that as a gateway too. The flaw was discovered by Lookout and Citizen Lab.

Advertisement
Advertisement - Article continues below

The hack the same as one that was discovered on iPhones last week, allowing criminals to take control of the devices and watch the user, monitoring the apps they use and information they enter into their smartphone. Apple quickly released an update to stop hackers using the Trident vulnerability. Like this potential hack on desktops, Trident could use apps such as Gmail, Facebook and WhatsApp to spy on whatever the user is doing.

So far, the hack has only been seen targeting one person, Emirati civil rights activist Ahmend Mansoor. However, it could conceivably be in use in the wild spying on other individuals who don't realise they have been attacked.

Featured Resources

The essential guide to cloud-based backup and disaster recovery

Support business continuity by building a holistic emergency plan

Download now

Trends in modern data protection

A comprehensive view of the data protection landscape

Download now

How do vulnerabilities get into software?

90% of security incidents result from exploits against defects in software

Download now

Delivering the future of work - now

The CIO’s guide to building the unified digital workspace for today’s hybrid and multi-cloud strategies.

Download now
Advertisement

Recommended

Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/business-strategy/digital-transformation/354201/boston-dynamics-dog-like-robots-sniff-out-bombs-for
digital transformation

Boston Dynamics dog-like robots sniff out bombs for Massachusetts police

26 Nov 2019
Visit/mobile/google-android/354189/samsung-galaxy-a90-5g-review-simply-the-best-value-5g-phone
Google Android

Samsung Galaxy A90 5G review: Simply the best value 5G phone

22 Nov 2019
Visit/mobile/mobile-phones/354222/samsung-sails-past-apples-market-share-despite-smartphone-market-slump
Mobile Phones

Samsung sails past Apple's market share despite smartphone market slump

28 Nov 2019
Visit/hardware/354232/raspberry-pi-4-owners-complain-of-broken-wi-fi-when-using-hdmi
Hardware

Raspberry Pi 4 owners complain of broken Wi-Fi when using HDMI

29 Nov 2019