Known zero-click exploits worldwide 2023
In September 2023, an investigation was published indicating the infection of iPhone iOS (16.6) devices with Pegasus spyware. The report refers to the exploit chain as BLASTPASS. This, by far, is the latest known zero-click exploit. This type of exploit does not require any action from the user. The September 2023 incident was not the only one concerning Apple product users. In 2021, it was reported about another case of a zero-click malware spread. Earlier, in 2016, some Apple users were targeted by a tool called Karma, which also had a zero-click nature. In 2019, approximately 1400 users of WhatsApp Messenger were targeted by a zero-click exploit that infected their devices with Pegasus spyware.
