AirDrop has a new NameDrop feature for quickly sharing contact information with a person nearby, and the Phone app has customizable Contact Posters that let you choose what people see when you call them
I wonder if this is a possible vector for a “1 tap” or “0 click” attack. NSO and other black hat security firms can’t wait 😂
Attacker:
setup malicious “contact poster”
call victim
victim gets malicious contact poster which is able to bypass security and achieve RCE
I wonder if this is a possible vector for a “1 tap” or “0 click” attack. NSO and other black hat security firms can’t wait 😂
Attacker:
I’m sure malicious actors will put it through its paces
They could already text the malicious picture, I’m guessing the phone app requires fewer privileges than the messages app.