Zero-Click Attack

In short: In a zero-click attack a device is infected without the victim having to click or open anything.

In more detail: It is enough for a prepared message to arrive or a data packet to be processed.

In Depth

Example

The spyware Pegasus used, among others, a hole in iMessage image processing (“FORCEDENTRY”, 2021) to infect iPhones without user action.

Protection

Install updates immediately, lockdown mode for people at risk (for example journalists), restart devices regularly, switch off unnecessary services and preview functions. See zero-day vulnerabilities.

See also: Zero-Day Vulnerabilities, Pegasus, Exploit