Operation Triangulation: Mapping the threat

Operation Triangulation is a zero-click APT campaign (first seen in 2019, confirmed on iOS up to 15.7) that compromises iPhones via iMessage, deploys a root-privileged toolkit capable of running arbitrary modules and persisting across reboots, and communicates with a set of identified C2 domains; Kaspersky and Group-IB published indicators, forensic steps, and recommendations for detection and response.