The Cabinet Division has issued a Cyber Security Advisory, alerting that Apple iPhones in Pakistan are being targeted with the Blast Pass Exploit to deploy the Pegasus spyware.

The advisory emphasizes that NSO Group’s Pegasus spyware is reportedly aiming at Apple iPhone users by exploiting the iMessage feature (CVE-2023-41061 and CVE-2023-41064) to execute the Blast Pass, a type of zero-day and zero-click malware deployment.

The Blast Pass Exploit is capable of infecting even the latest iOS versions (e.g., 16.6) without requiring any user interaction.

In response to this threat, Apple has issued a remedial advisory for iPhone users and is sending alerts to its users to notify them of the potential targeting by NSO Pegasus spyware or state-sponsored attackers. To protect themselves from the Blast Pass Pegasus exploit and other cyber threats, users are advised to follow specific safety measures, as outlined below:

Safety Measures for Blast Pass Exploit:

1. Update to the latest iOS version (16.6.1 or higher) to receive crucial security updates.
2. Optionally enable lockdown mode for enhanced protection against Blast Pass attacks.
3. Disable the iMessage feature on iPhones.

General Security Measures for Apple Users:

1. Use strong passcodes and enable two-factor authentication for your Apple ID.
2. Download apps exclusively from the official Apple Store to avoid malware.
3. Employ anonymity-based solutions while browsing the internet to conceal the identities of key individuals.
4. Always deactivate location services on Apple devices.
5. Subscribe to Apple’s security bulletins, threat notifications, and automatic OS updates.
6. Refrain from using phones in sensitive locations or during meetings.

These measures are crucial for safeguarding your Apple iPhone from potential security threats and ensuring the protection of your data and privacy.