Threat video1:00
iVerify Advanced Mobile Threat Report 2026: Detection & IOCs
iVerify finds criminal groups forking leaked iOS exploit kits for credential and crypto theft. Hunt with 9 detection rules, 12 IOCs and a free Splunk SPL rule.
Read the full threat intel for iVerify Advanced Mobile Threat Report 2026: Mobile Spyware Shifts… →
Chapters
- 0:00The hookThree in four detections are criminal.
- 0:04The storyLeaked iOS kits, forked by criminals.
- 0:11Attack pathAccording to iVerify, criminals fork leaked exploits.
- 0:27AttributionNo threat actor is attributed.
- 0:32Indicators of compromiseNo malicious indicators were published.
- 0:38MITRE ATT&CK techniques4 ATT&CK techniques, from initial access to collection.
- 0:43Remediation3 steps now: Apply current iOS and Android security updates on all managed.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Three in four detections are criminal.
0:05Leaked iOS kits, forked by criminals.
0:08Credentials and crypto are the prize.
0:11According to iVerify, criminals fork leaked exploits.
0:15Exploits run when an ad renders.
0:17Outdated web code, App Store apps.
0:20Then they clean up traces fast.
0:22Protect staff, not only executives.
0:27No threat actor is attributed. Confidence: low.
0:32No malicious indicators were published.
0:384 ATT&CK techniques, from initial access to collection.
0:433 steps now: Apply current iOS and Android security updates on all managed.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.