logo

Key IOCs for Pegasus and Predator Spyware Cleaned With iOS 26 Update

ID: d6f5c6af-7077-51d7-8c2d-1752225acf32

STIX ID: report--d6f5c6af-7077-51d7-8c2d-1752225acf32

Feed Name: iVerify Blog

Threat Score
80/100

Date Published: 2026-03-03

Date Updated: 2026-04-28

...
...

### Executive summary The report warns that iOS 26 overwrites shutdown.log on reboot, removing a critical forensic artifact historically used to detect sophisticated spyware such as Pegasus and Predator; it documents how these spyware families evolved to wipe or manipulate shutdown.log, provides a pre-iOS26 IOC, and advises capturing a sysdiagnose before upgrading or delaying the update to preserve evidence.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.