Operation Triangulation is an ongoing APT campaign targeting iOS devices with zero-click iMessage exploits. The threat actor behind the campaign has been active since at least 2019 and continues to operate. The attack chain involves the delivery of a malicious iMessage attachment that launches a series of exploits, ultimately leading to the deployment of the TriangleDB implant. Kaspersky researchers have discovered and reported multiple vulnerabilities used in the campaign, with patches released by Apple.
Executive Summary
Operation Triangulation is a high-sophistication APT campaign exploiting zero-click vulnerabilities in Apple's iMessage to target iOS devices. The actors deploy the TriangleDB implant, indicating a focus on advanced, mobile-based attacks.
Goals & Targeting
The actors likely aim for espionage or data theft, targeting high-value individuals in sectors like government and corporate spheres. Their strategy suggests a focus on discrete, long-term access to sensitive information, aligning with APT behavior often linked to nation-state activities.
Enhanced Description
Operation Triangulation is an ongoing APT targeting iOS users with sophisticated zero-click exploits delivered via malicious iMessages. The attack chain involves exploiting Apple vulnerabilities before deploying TriangleDB, demonstrating mastery in exploit development and persistence. Kaspersky's research highlights the campaign's existence since at least 2019, emphasizing its longevity and effectiveness despite patches.
Key Capabilities
MITRE ATT&CK Tactics
ATT&CK Techniques
Software / Tooling
Campaigns & Victims
Operation Triangulation's persistence since 2019 indicates a dedicated adversary targeting mobile platforms. Their focus on zero-click exploits ensures infections without user interaction, highlighting technical expertise and strategic patience.
IOC Patterns
Recommended Actions
Suggested Tags
Confidence Assessment
Moderate confidence in targeting methods due to Kaspersky's research. Limited info on motivations, capabilities beyond known techniques, and specific campaigns reduces certainty.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
0
Tactics