From 3a997d30d20d7b6608302ed8d0ca33156f5828b1 Mon Sep 17 00:00:00 2001 From: tek Date: Mon, 15 Apr 2024 23:28:36 +0200 Subject: [PATCH] Updates SMS module to highlight new text of Apple notifications --- mvt/ios/modules/mixed/sms.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/mvt/ios/modules/mixed/sms.py b/mvt/ios/modules/mixed/sms.py index 649134300..e5b744be8 100644 --- a/mvt/ios/modules/mixed/sms.py +++ b/mvt/ios/modules/mixed/sms.py @@ -66,8 +66,11 @@ def serialize(self, record: dict) -> Union[dict, list]: def check_indicators(self) -> None: for message in self.results: - alert = "ALERT: State-sponsored attackers may be targeting your iPhone" - if message.get("text", "").startswith(alert): + alert_old = "ALERT: State-sponsored attackers may be targeting your iPhone" + alert_new = "ALERT: Apple detected a targeted mercenary spyware attack against your iPhone" + if message.get("text", "").startswith(alert_old) or message.get( + "text", "" + ).startswith(alert_new): self.log.warning( "Apple warning about state-sponsored attack received on the %s", message["isodate"],