Updates SMS module to highlight new text of Apple notifications

mvt-project · Apr 15, 2024 · 3a997d3 · 3a997d3
1 parent 6f56939
commit 3a997d3
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/mvt/ios/modules/mixed/sms.py b/mvt/ios/modules/mixed/sms.py
@@ -66,8 +66,11 @@ def serialize(self, record: dict) -> Union[dict, list]:
 
     def check_indicators(self) -> None:
         for message in self.results:
-            alert = "ALERT: State-sponsored attackers may be targeting your iPhone"
-            if message.get("text", "").startswith(alert):
+            alert_old = "ALERT: State-sponsored attackers may be targeting your iPhone"
+            alert_new = "ALERT: Apple detected a targeted mercenary spyware attack against your iPhone"
+            if message.get("text", "").startswith(alert_old) or message.get(
+                "text", ""
+            ).startswith(alert_new):
                 self.log.warning(
                     "Apple warning about state-sponsored attack received on the %s",
                     message["isodate"],