Introduction

A zero-click attack is a cyberattack that exploits a vulnerability to compromise a device without any user interaction, such as a click or a keypress. These attacks are highly sought after because they can infect a target's device, like a smartphone, without the user being aware of the compromise. The FORCEDENTRY exploit, discovered in 2021, is an example of a zero-click attack, and software like NSO Group's Pegasus spyware has been associated with such attacks.

How they work

• No user interaction:

  The exploit triggers automatically, often by sending a message or data to the target device through an app like iMessage.

• Exploits vulnerabilities:

  The attack takes advantage of a security flaw, or vulnerability, in the software or operating system of the device.

• Stealthy infection:

  Once the vulnerability is exploited, the attacker can install malware or spyware, gaining access to the device's data and functions without the user's knowledge.

How to protect yourself

• Keep software updated: Regularly update your operating system and applications to patch security vulnerabilities.

• Restart your device: Restarting your device can clear some types of malware from memory, potentially disrupting the attack.

• Be cautious with public networks: Avoid connecting to public Wi-Fi networks when possible.