Canada

Apple’s new blocking mode to protect against spyware like Pegasus

Expected on devices this fall, the new lockout mode aims to make Apple devices extra secure at the expense of functionality.

Apple has developed a new “lock mode” for its devices to give extra security to users who are more susceptible to targeted spyware cyber attacks.

Individuals such as journalists, lawyers, government officials and human rights activists have reportedly been attacked by authoritarian governments and criminals using spyware such as Pegasus from Israel’s NSO Group or, more recently, Italy’s Hermit spyware.

The new lockout mode will be available on iPhone, iPad and Mac devices later this year, when Apple – known for making some of the most secure devices and software on the market – is expected to release a suite of software updates.

Apple describes Lockdown Mode as “an extreme, optional protection for the very small number of users who face serious, targeted threats to their digital security.” Enabling it ensures device protection, but comes at the cost of functionality.

Once turned on, Lock Mode blocks most types of message attachments other than images and disables features like link previews. Web browsing technologies such as just-in-time JavaScript compilation are disabled, except for sites the user trusts.

Incoming invitations and service requests, including FaceTime calls, are also blocked if the user has not previously interacted with the person who initiated the call or request. Cable connections to a computer or accessory are also blocked when iPhone is locked.

Lockdown mode is not compatible with the types of device management software commonly used by larger organizations.

“Lockdown Mode is an innovative capability that reflects our unwavering commitment to protecting users from even the rarest and most sophisticated attacks,” said Ivan Krastic, Apple’s head of security engineering and architecture.

Krstic noted that “the vast majority of users” will never fall victim to highly targeted cyberattacks. But for those who may be at risk, Apple will work “tirelessly” to protect them.

“This includes continuing to design defenses specifically for these users, as well as supporting researchers and organizations around the world who are doing critically important work in uncovering the mercenary companies that create these digital attacks.”

Last November, Apple sued the NSO Group behind the Pegasus spyware in an attempt to “hold it accountable for monitoring and targeting Apple users,” two months after it had to issue an emergency security patch for a Pegasus backdoor on all devices.

NSO Group develops surveillance technology that can be used to track targeted iOS and Android users. It claims its products are used only by government intelligence and law enforcement agencies to prevent and investigate serious crimes and terrorist incidents.

10 things you need to know straight to your inbox every weekday. Sign up for the Daily Brief, Silicon Republic’s digest of important science and technology news.