Zimperium Discovers Full-Duplex ICMP Redirect Attacks in the Wild

Zimperium researchers describe "DoubleDirect", a full‑duplex ICMP Redirect MITM technique observed in the wild that redirects mobile device traffic (DNS and downstream IPs) through an attacker-controlled host to steal credentials and deliver malware. The report includes a proof‑of‑concept tool, configuration and execution details, lists affected platforms (iOS, many Android devices, macOS), observed incidents across multiple countries, and recommended mitigations such as disabling ICMP redirects and vendor fixes.