HackerTube.dev

37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchers

media.ccc.de · 84.6K views · 2023-12-29 · 58:06

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

On Hacker News

HN recommends it as a gripping look at what nation-state attackers can do, used as the primary source in threads about iPhone security and Kaspersky.

Recommended by 2 HN people across 2 months · HN mentions 2024–2024

Topics

Search by tags

What people said

nebula8804 · 2024-07 · Strong recommendation

Kaspersky is a really talented group. Their talk at CCC about discovering a zero-click attack, managing to capture all the stages of the attack, finding four zero day vulnerabilities and discovering a previously unknown spyware that was there for years was a rollercoaster of a ride. If you have the time to watch it I highly recommend it! [1]: [VIDEO]

Read the original HN comment ↗
brokenmachine · 2024-10 · Recommendation

Relevant: 37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchers [VIDEO] Absolutely insane attack. Really opens your eyes on what nation-state attackers are capable of.

Read the original HN comment ↗
perching_aix · 2024-11 · Reference

Network traffic monitoring is routinely done at enterprises. It's usually part-automated using the typical approaches (rules and AI), and part-manual (via a dedicated SOC team). There are actual compromises caught this way too, it's not (entirely) just for show. A high-profile example would be Kaspersky catching a sophisticated data exfiltration campaign at their own headquarters: [VIDEO] So it is definitely possible, just maybe not how you imagine it being done.

Read the original HN comment ↗

Sources

Video by media.ccc.de, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources