Key Facts

• Researchers found two hacking campaigns using online ads and expired domains to deliver spyware to iPhones.
• One attack infected an iPhone user after they saw a soccer ad on Instagram, stealing passwords and crypto wallet data.
• Another campaign affected nearly 8,000 websites by buying old domains those websites still used, redirecting visitors to spyware.
• These attacks happen automatically as people browse, without needing to click on anything.
• The spyware checks the iPhone’s software version before attacking to ensure compatibility.
• Cybercriminals target users by narrowing down victims based on interests and device types.
• Experts say mobile spyware threats are growing rapidly and users should keep their phone software updated to stay safe.
• The hacker groups are suspected to have ties to China or want to appear that way.