Updates SMS module to highlight new text of Apple notifications

Requires latest cryptography version
2024-04-15 23:28:36 +02:00 · 2024-04-15 22:41:01 +02:00
2 changed files with 6 additions and 3 deletions
--- a/mvt/ios/modules/mixed/sms.py
+++ b/mvt/ios/modules/mixed/sms.py
@ -66,8 +66,11 @@ class SMS(IOSExtraction):

    def check_indicators(self) -> None:
        for message in self.results:
-            alert = "ALERT: State-sponsored attackers may be targeting your iPhone"
-            if message.get("text", "").startswith(alert):
+            alert_old = "ALERT: State-sponsored attackers may be targeting your iPhone"
+            alert_new = "ALERT: Apple detected a targeted mercenary spyware attack against your iPhone"
+            if message.get("text", "").startswith(alert_old) or message.get(
+                "text", ""
+            ).startswith(alert_new):
                self.log.warning(
                    "Apple warning about state-sponsored attack received on the %s",
                    message["isodate"],
--- a/setup.cfg
+++ b/setup.cfg
@ -31,7 +31,7 @@ install_requires =
    iOSbackup >=0.9.923
    adb-shell >=0.4.3
    libusb1 >=3.0.0
-    cryptography >=38.0.1
+    cryptography >=42.0.5
    pyyaml >=6.0
    pyahocorasick >= 2.0.0
Author	SHA1	Message	Date
tek	3a997d30d2	Updates SMS module to highlight new text of Apple notifications	2024-04-15 23:28:36 +02:00
tek	6f56939dd7	Requires latest cryptography version	2024-04-15 22:41:01 +02:00