Kaspersky’s iShutdown Tool Detects Pegasus Spyware on iOS Devices

Kaspersky GReAT published a lightweight detection method and Python utility called iShutdown that analyzes iOS Shutdown.log artifacts to detect signs of advanced iPhone spyware (Pegasus, QuaDream/Reign, and Intellexa’s Predator). The report explains discovery of 'sticky' processes that delay reboots, common filesystem paths used by the spyware, validation against known Pegasus infections, and provides guidance and tooling to help users identify compromises and improve device hygiene.