Key IOCs for Pegasus and Predator Spyware Cleaned With iOS 26 Update
ID: d6f5c6af-7077-51d7-8c2d-1752225acf32
STIX ID: report--d6f5c6af-7077-51d7-8c2d-1752225acf32
Feed Name: iVerify Blog
Threat Score
### Executive summary The report warns that iOS 26 overwrites shutdown.log on reboot, removing a critical forensic artifact historically used to detect sophisticated spyware such as Pegasus and Predator; it documents how these spyware families evolved to wipe or manipulate shutdown.log, provides a pre-iOS26 IOC, and advises capturing a sysdiagnose before upgrading or delaying the update to preserve evidence.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
