Zero Click Exploits Explained: Technical

[@brankezza]

3:50 jumpscare alert

[@BlastarX]

Mini heart attack 03:49

[@realtimecyber]

Keeping you awake! 🤣

[@FreakyStyleytobby]

Maxi one here

[@vkb9013]

Honestly it seriously scared me...

[@realtimecyber]

@@vkb9013 One of our first videos, we've toned down the noises since.

[@vkb9013]

@@realtimecyber Thank you! Great video as well.

[@BEN-ys6gu]

In conclusion, security is a mess

[@PIPPIPPIPPIPPIPPIP]

Yes it is but they could only get into the Phone because They Programmed The Phone to Run The GIF Outside of the Blast Door that was supposed to Stop That kind of Attack

[@BEN-ys6gu]

@@PIPPIPPIPPIPPIPPIP still a mess. A clean strong security doesn't seem like a priority. It's always about patching up all exploits at the end, after they make the functionality however they want

[@beepboop-o5s]

seurity is a lie sold to you so that those in power can horde as many exploits as possible, in order to exert control they dont deserve.

[@ytg6663]

Explain

[@Sprinkles-r5y]

Or rather security is not secure

[@bukdays]

Most convincing TTS i've heard so far

[@realtimecyber]

Didn't pass the turing test?

[@raindabz]

@@realtimecyber thanks for teaching me what Turing is.

[@ejonesss]

please turn down the music. i understand and get it that you want us to be able to shazam the music in witch case just post a comment and tell us what the song is and where to get it.

[@Geflechtmeister]

Why the heck is it today still possible to make an overflow (which one ever)? I thought this was an issue back in the nineties but it's 2024!

[@FatJoesSon]

Question; the major concern, even with patching, is: do the patches actually remove the infection, or just prevent it? Does “Lockdown Mode” remove the infection? And will Pegasus of the 2020’s still survive hard reset? Do you all know the answer to this? Apple should develop those resources into being able to eviscerate the infection.

[@realtimecyber]

Patches almost never remove malware from any device, iOS, Android, mac, Windows, or Linux. Patches simply fix vulnerabilities that were used for initial access and or privilege escalation. Lockdown mode just reduces the attack surface that was used for initial access to install it, again, it does not remove it. Like most malware, factory reset can remove it, but since its so easy to install with zero click exploits, the spyware operators will just reinstall it.

[@FatJoesSon]

@@realtimecyber Thank you for your response. I agree that they’ll just spear the device again, but these measures aren’t proactive is my disappointment in Apple. Hopefully they add in their own threat detection and arm the devices and Apple stores with removal tools. Also, I thought Pegasus showed reboot/reset persistence?

[@realtimecyber]

@@FatJoesSon Anti-virus and anti-malware capabilities would help but those aren't foolproof either. Fileless malware commonly evades detection of Windows defender and other 3rd party antivirus/anitmalware. To survive a reboot some of its code just needs to be stored outside the RAM. The reason factory reset doesn't work is because Pegasus likely gains access to cloud accounts that it can use to reinfect, also the operators could simply program their command and control servers to send another zero-click exploit if they lose communication with the phone.

[@FatJoesSon]

@@realtimecyber I agree, I’m not trying to oversimplify it, but I really think Apple (over any phone developer, or 3rd party anti-virus), if anyone, can do better. They also should be motivated to go proprietary to control the smartphone anti-virus market with their own product, since no one really does. I think it’s just brand longevity for the new world in the coming, very sophisticated decades. Yet, what you said makes total sense. Thank you for your insight and guidance, I just thought you would be interesting to talk with. Last question, would you (or someone you know) be willing to do a cybersecurity consult, for an individual? I am on a project team where we have received concerning files on certain iOS apps, and we are not CS/IT, security, or forensics, and would like to get them checked.

[@realtimecyber]

@@FatJoesSon We do offer cybersecurity consulting. Fill out our consultation form at realtimecyber.net and we'll connect. We do have people that can help with this. (just updated our website, it takes a sec to load...)

[@Red00022]

We are all walking around with hacked phones. Damn.. Windows all over again

[@realtimecyber]

The zero click exploits are very sophisticated and the commercial spyware licenses are very expensive so its very unlikely most phones are being targeted, unless you are a person of interest like a journalist or activist against a client government.

[@beepboop-o5s]

the federal government said last year that flying a gadsden flag makes you a terrorist. yet my state offers gadsden license plates. .. lets be real here, existing makes you an enemy of the government.@@realtimecyber

[@Atheism-And-Normative-Ethics]

​@@realtimecyber if you've used a real name online and you've expressed an opinion, you've been against someone at some point. You've also likely been within a certain number of degrees (~3) of contact to someone who has likely voiced views that would be considered political violence to some. That's enough for you to be surveilled with the patriot act.... Other countries don't have such limitations on degrees of association

[@Shackleford_Rusty]

Good research, and understanding. Well done 👍🏻.

[@nightero6873]

Great video!

[@redslashed]

Your voice makes it interessting😁

[@realtimecyber]

Thanks for the feedback. Make sure to subscribe for more!

[@tanzen3356]

I thought my phone was hacked at 3:50

[@MarinaNeri-jl1zx]

Can zero click be sent by vinted chat and other sales platforms?

[@realtimecyber]

I'm not familiar with that platform, but it likely can.

[@Sergio-er1ez]

WHY IS THE BACKROUND MUSIC SO LOUD?

[@realtimecyber]

It was one of the first videos we made

[@Sergio-er1ez]

Oh

[@boysrcute]

dude this actually slaps

[@shufflepack]

Same here. Really commited to watch till the end, but music is way too loud. Watchminutes lost :( well done for your research though

[@realtimecyber]

Thanks for the feedback. Unfortunately we cant edit the sound once videos are posted, we've reduced the music volume level in newer videos based on everyone's feedback.

[@saadamiens]

6:36 that's crazy

[@truckfinanceaustralia1335]

Great vid!

[@jjk9o9]

Musik is to loud ! to focus or even unterstand what is being said.

[@realtimecyber]

Thanks for the feedback.

[@ttotto2958]

iam waiting for -1 click exploit

[@realtimecyber]

🤣

[@user-vv8pv3gm8x]

👍

[@realtimecyber]

Glad you enjoyed it.

[@mr_whyy]

icloud "partition" what tf are you talking about, a partition is part of a hard drive, i cloud is an online service. stop reading bs and actually get a clue ?

[@SavannahSunshine49]

You're mean?

[@mr_whyy]

I am @@SavannahSunshine49

[@noelio67]

The Feds use it....go figure

[@calipso278]

Oh nyo

[@SyrianSpace]

3:50 WTF?

[@realtimecyber]

Making sure you're awake!

[@SyrianSpace]

@@realtimecyber Thanks for the video though!

[@SyrianSpace]

@@realtimecyber is it possible for zero-click attack to occur by watching a KZbin video? because it appears that everything hackable!

[@realtimecyber]

@@SyrianSpace Its unlikely given Google/KZbin's tight security controls. But we cannot rule it out completely. An attack like that would seem to fall into the watering hole attacks family. Watch our video on Candiru Spyware to learn more and make sure to subscribe!

[@iRelevant.47.system.boycott]

@@realtimecyber When an ancient issue like a .gif takes a modern Apple south, I wouldn't count anything out. And forget about any dealer diagnostic software giving you any direct feedback on serious issues. Android next.

[@altaris6593]

When shit sits in the system files hard reset wont work- only system reinstalling would do the job

[@iRelevant.47.system.boycott]

If you made it on the wrong target list, good luck even with your new phone.

[@user-df4ib7gb7w]

😅😅😅 Should of studied harder