Reign spyware software used to attack iPhones; comparable to Pegasus

Researchers have discovered a new spyware with destructive capabilities that are comparable to Pegasus. The spyware Reign could be used by governments and bad actors to attack the iPhones of individuals of interests.

According to researchers from the Citizen Lab of the Munk College of the University of Toronto, the spyware Reign comes from a low-profile Israeli company QuaDream that specialises in the development and sale of advanced digital offensive technology to government clients. The tool can transmit data after infecting devices, without the user's knowledge.

Massive threat to iPhone's Security

Reign uses a vulnerability called "Endofdays" to attack iPhone devices running iOS 14.4 and iOS 14.4.2. The report notes that Regin works like the NSO Group's Pegasus spyware software, reportedly utilising zero-click exploits to hack into target devices. Once installed, Reign could access several iOS and iPhone features.

These included recording audio from calls and the microphone, taking pictures using the cameras, generating iCloud 2FA passwords, searching through files on the device, tracking device location, clean software traces to minimise detection possibilities, and extract or remove content from the keychain. While traces of the spyware could be wiped out with a self-destruct feature, it was also used by researchers to identify if a victim had been attacked by it.

Extent of Reign's Reach

Meta mentions that they detected activity on their platforms that they attributed to QuaDream. The spyware was also used to attack political opposition, activists, journalists, and other figures in North America, Central Asia, Southeast Asia, Europe, and the Middle East.

Researchers also cite several reports showing that QuaDream sold its spyware software to various government clients including Singapore, Saudi Arabia, Mexico, and Ghana, and has pitched its services to Indonesia and Morocco.

QuaDream reportedly operates with a minimal public presence, lacking a website, extensive media coverage, or social media presence. However, a legal dispute a Cyprus-registered company has resulted in the exposure of interesting details about the QuaDream's business. The researchers also identified several key figures associated with QuaDream despite the veil of secrecy surrounding it.