Hundreds of Hacked Websites Serve Spyware to iPhone Users

Hackers are exploiting iPhone users at scale by serving spyware via hundreds of compromised websites, with attackers delivering malicious code simply when a user views an ad or visits an infected page. The campaign was reported by Thomas Brewster, citing researchers who describe a large network of hacked sites loading iPhone-exploiting payloads. In one noted instance, a malware advertisement was even served through Instagram.

The discoveries were prompted by iVerify, a mobile security startup, after cybersecurity researcher Scott Helme flagged hundreds of compromised sites that run code intended to hack iPhones. iVerify’s co‑founder Rocky Cole is quoted describing the threat as users “scrolling and being infected” even though they are not visiting traditional malware sites. The article in Forbes outlines the breadth of the attack and the nature of the delivery network behind the iPhone spyware.

Evidence and analysis are attributed to Brewster’s Forbes reporting, with the underlying findings tracing back to Helme’s disclosure and iVerify’s subsequent investigation. No specific CVEs or device firmware details are provided in the cited material. The piece notes the scale of infected sites and the real-world impact on iPhone users, while directing readers to Forbes for the full narrative.