Locking Down Lockdown Mode, AirDrop, and Bluetooth Against Targeted Spyware¶

Short-range wireless protocols (Apple AirDrop, . NameDrop, . Android Quick Share, . Bluetooth Low Energy / BLE, ani Apple Continuity / AWDL) and rich-media messaging parsers (iMessage, . WhatsApp, ani WebKit) are designed for effortless zero-configuration convenience. However, that convenience creates two distinct emergency scenarios. First, in public places such as subway cars, airplanes, lecture halls, protests, or stadiums, strangers can blast unsolicited graphic images to your screen via AirDrop / Quick Share ("cyber-flashing"), accidentally trigger contact swaps via iOS NameDrop, or freeze your phone screen with endless pairing popups using a $170 Flipper Zero / ESP32 Bluetooth Low Energy (BLE) Advertising Flood. Second, for investigative journalists, human-rights attorneys, executives, diplomats, political dissidents, or high-net-worth targets, commercial mercenary spyware (Pegasus, . Predator, . Reign, . Graphite) exploits Zero-Click vulnerabilities inside iMessage, FaceTime, WebKit, or cellular basebands to compromise a smartphone silently without the victim ever tapping a single link.

If you are in immediate physical danger or facing unlawful in-person harassment on public transit or in an aircraft cabin, move to a safe area near transit staff or flight crew and call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or consult our directory of international kɔrɔtɔko nimɔrɔw. Follow the steps below to shut down unsolicited wireless drops in 5 seconds, stop BLE popup floods, and activate Apple Lockdown Mode or Android Advanced Protection against zero-click exploits.

--- .

Aw bɛ o kɛ sisan¶

1. If you are currently receiving unsolicited AirDrop photos, Android Quick Share files, or nonstop Bluetooth pairing popups on a train, plane, or crowd, swipe down your Control Center / Quick Settings and turn OFF both AirDrop / Quick Share AND Bluetooth inside the main Settings app (not just the Control Center icon). Tapping the Bluetooth icon in Apple's iOS Control Center only disconnects current accessories until tomorrow morning while leaving the Bluetooth Low Energy (BLE) controller and Apple Wireless Direct Link (AWDL) radio active in the background. To physically power down the Bluetooth radio chip against a Flipper Zero BLE flood, you must open Settings -> Bluetooth -> Toggle OFF.
2. Never tap Accept walima Open on an unsolicited AirDrop, Quick Share, or Bluetooth file transfer, and know that Apple's AirDrop preview thumbnail is rendered before you tap Accept. Set AirDrop to Receiving Off (walima Contacts Only) fɛ Settings -> General -> AirDrop, ka Android Quick Share ( ) sigi sen kan.Settings -> Connected devices -> Connection preferences -> Quick Share -> Who can share with you) fɛ Contacts only walima ** .Off** o la i ka telefɔni ka ja fitininw lajɛbaga tɛ baara kɛ abada dosiyew la minnu tɛ dannaya sɔrɔ ka bɔ dunanw yɔrɔ.
3. Ka lajɔ Bringing Devices Together (NameDrop) kɔnɔ Settings -> General -> AirDrop n’i y’i ka iPhone ta yɔrɔw la minnu falen don mɔgɔw la walima n’i y’a bila lajɛba tabali kan. A donna iOS 17+ kɔnɔ, Bringing Devices Together bɛ contact-card walima SharePlay ɲininkali dɔ daminɛ tuma o tuma ni iPhone fila minɛna a kɔnɔ 2 centimeters (0.8 inches) ɲɔgɔn ka ɲɔgɔn ta. Ka a faga Bringing Devices Together bɛ proximity-bump triggers jɔ pewu k’a sɔrɔ a bɛ sira di hali bi manual AirDrop ma n’i b’a fɛ.
4. Ni i ye faama dɔ sɔrɔ Apple Threat Notification walima Google Threat Analysis Group (TAG) lasɔmini ko i ka telefɔni bɛ ka laɲini kɛ State-Sponsored / Mercenary Spyware fɛ (walima n’i ye kunnafonidilaw, sariyatigi, sɔsɔlikɛla, walima ɲɛmɔgɔba ye min farati ka bon), i ka ON kɛ Lockdown Mode o yɔrɔnin bɛɛ. iPhone, iPad ani Mac kan, taa Settings -> Privacy & Security -> Lockdown Mode -> Turn On Lockdown Mode -> Turn On & Restart. Lockdown Mode ye lafasali ye min bɛ dantɛmɛ, min bɛ dɛmɛ sɔrɔ fɛnɲɛnamafagalanw fɛ, min bɛ iMessage attachment parsers zero-click bali, ka JIT JavaScript compilation bali, ka FaceTime weleli dɔnbaliw bila, ka 2G/3G cellular baseband downgrades bali, ani ka USB data connections wired bali ka telefɔni locked.
5. Ni i bɛ sigasiga ko zero-click memory-resident spyware banakisɛ min bɛ baara la (Pegasus / . Predator), i ka telefɔni daminɛ kokura sisan ani ka iOS minɛ sysdiagnose / encrypted backup for MVT (Mobile Verification Toolkit) forensic analysis BEFORE factory-resetting. Ikomi bi mercenary spyware dabɔra walasa lakana laboratuwariw kana u minɛ ani ka u kɔsegin, a suguya caman sigilen bɛ volatile ** kɔnɔ kosɛbɛ.RAM (Random Access Memory)** sanni ka baarakɛminɛnw tilayɔrɔba min bolonɔ bilalen bɛ kalan dɔrɔn na, o sɛmɛntiya. Telefɔni fagali pewu ani ka segin a kan, o bɛ RAM wulibaliw bɔ, ka binkannikɛla wajibiya ka exploit kura dɔ jeni walasa ka banakisɛ don i la kokura (o bɛ bali pewu ni Lockdown Mode daminɛna).
6. Ni i haminanko ye denbaya kɔnɔ tɔɲɔli ye, i furuɲɔgɔn kɔrɔ dɔ, walima furuɲɔgɔn keleyalen dɔ min bɛ i ka sɛbɛnw kalan sanni ka kɛ gɔfɛrɛnaman ka kunnafoniko baarada ye min bɛ dɔrɔmɛ miliyɔn caman sɔrɔ, i ka tugu an ka sokɔnɔna stalkerware protocol kɔ fɔlɔ. Mɔgɔw ​​ni ɲɔgɔn cɛ sɛgɛsɛgɛli kɛmɛsarada la, 99 ni kɔ bɛ baara kɛ ni iCloud/Google seereyaw jɛlenw ye, WhatsApp Linked Devices, walima Android sideloaded .APK stalkerware sanni ka zero-click exploits (aw ye an ka gafe dafalen lajɛ min kan Stalkerware, spyware ani don dogolenw dɔnni telefɔniw kan).

flowchart TD
    A["Wireless Intrusion walima Spyware Crisis kan Smartphone / Ordinateur portable kan"] --> B{"Mun de bɛ ka kɛ sisan yɛrɛ?"}
    B -->|"AirDrop / Quick Share foto walima filen popup min ma ɲini jama cɛma"| C["‘Decline’ digi o yɔrɔnin bɛɛ -> Settings da wuli -> AirDrop / Quick Share sigi ‘Receiving Off’ kan."]
    B -->|"Apple TV / AirPods popup spam congelé écran (Flipper Zero BLE Flood) min tɛ jɔ (Flipper Zero BLE Flood)"| D["Settings app kunba da wuli -> Bluetooth -> Toggle OFF (Control Center toggle dɔrɔn TƐ BLE jɔ)"]
    B -->|"Apple/Google Mercenary Spyware Alert sɔrɔlen OR Laɲini min bɛ faratiba la (Kunnafonidila, Avocat, Executive)"| E["1. Telefɔni daminɛ kokura joona walasa ka RAM-resident spyware payload (spyware payload) ko"]
    E --> F["2. IOS/macOS Lockdown Mode (Settings -> Privacy & Security -> Lockdown Mode) walima Android 15/16 Advanced Protection (Lakanali kɔrɔlen) daminɛ"]
    F --> G["3. Aw bɛ iMessage & FaceTime bali ni binkanni bɛ sen na, ani ka Amnesty MVT forensic check kɛ backup encrypté kan"]
    B -->|"Siga bɛ so kɔnɔ / jɛɲɔgɔnw ka sɛgɛsɛgɛli kɛ sɛbɛnw kan walima GPS kan"| H["Aw ye iOS lakanani sɛgɛsɛgɛli kɛ / ka WhatsApp ka minɛnw ni Android sɔrɔcogo jateminɛ (aw ye Stalkerware Guide lajɛ)"]

--- .

Diagnostic matrix : danfara don Foroba Wireless Harassment, BLE DoS Spam ani Zero-Click Spyware¶

Ni popup kabakomaw bɔra i ka telefɔni na walima ni i bɛ hami ni wireless hacking ye foroba yɔrɔw la, baara kɛ ni nin fɛɛrɛbɔlan ye walasa ka bagabagali tigitigi n’a seko lakika dɔn:

--- .

Phase 1: Stopping AirDrop, NameDrop, Quick Share, and Flipper Zero BLE attacks in public¶

Whether you are commuting on a train, attending a conference, flying on a commercial airliner, or walking through a protest, configure these four wireless switches so no stranger within radio range can push a single popup or file to your screen.

1. Apple iPhone, iPad, and Mac (AirDrop, . NameDrop, & Continuity Hardening)¶

1. Lock Down AirDrop ani NameDrop (Settings -> General -> AirDrop):
2. Select Receiving Off (walima Contacts Only; note that even Apple's newer default converts "Everyone" into "Everyone for 10 Minutes", after which it reverts automatically, but setting it to Receiving Off is the safest posture in public).
3. Directly below that on the same screen, toggle OFF Bringing Devices Together (this disables NameDrop and proximity SharePlay triggers when someone bumps their iPhone against yours).
4. Scroll down to the bottom of the AirDrop screen and toggle OFF Use Cellular Data so interrupted wireless transfers can never continue over the internet after you walk away.
5. Understand the "Control Center Bluetooth Trap" on iOS:
6. When you swipe down Control Center on an iPhone or iPad and tap the Bluetooth or Wi-Fi icon so it turns white/gray (saying "Disconnecting Bluetooth Devices Until Tomorrow"), your iPhone's Bluetooth and Wi-Fi radios are STILL TURNED ON. Apple keeps them powered on in that state to run AirDrop, . AirPlay, . Apple Pencil, . Apple Watch, . Find My network, ani Continuity Handoff.
7. Because the radio is still listening for Apple Continuity BLE packets, a Flipper Zero BLE Spam attack will still flood your screen even after you turned Bluetooth off in Control Center.
8. How to Actually Turn Off the Radio: Open the Settings app -> Tap Bluetooth -> Flip the master switch to OFF (Gray) (or create a 1-tap iOS Shortcut using the Set Bluetooth -> Turn Bluetooth Off action, which genuinely powers down the hardware radio chip).
9. Disable Unsolicited AirPlay / Handoff & Auto-Join Hotspot Prompts (Settings -> General -> AirPlay & Continuity):
10. Set Automatically AirPlay to Never (walima Ask), toggle OFF Handoff when traveling through high-risk environments, and under Settings -> Wi-Fi -> Ask to Join Networks / Auto-Join Hotspot, set both to Off walima ** .Ask** so rogue proximity radios cannot trigger background handshakes.

2. Android Smartphones (Quick Share / Nearby Share & Google Fast Pair Hardening)¶

Google merged Nearby Share and Samsung Quick Share into a single unified Quick Share system across Android devices: 1. Open Settings -> Connected devices -> Connection preferences -> Quick Share (or on Samsung Galaxy: Settings -> Connected devices -> Quick Share). 2. Tap Who can share with you and change it from Everyone to Contacts only (and toggle OFF Allow everyone for 10 minutes) or turn Quick Share completely OFF. 3. Stop Flipper Zero Google Fast Pair Earbud Spam on Android: If someone in a cafe or lecture hall is broadcasting spoofed Google Fast Pair Bluetooth packets (causing fake Pixel Buds / JBL headphone images to pop up on your Android screen), open Settings -> Google -> All services -> Devices & sharing -> Devices and toggle OFF Scan for nearby devices. 4. Disable Background Bluetooth & Wi-Fi Scanning (Settings -> Location -> Location services): Even when Bluetooth is toggled off on Android, background location scanning can still pulse the BLE radio unless you open Settings -> Location -> Location services and toggle OFF Bluetooth scanning and Wi-Fi scanning.

3. Windows 10 & Windows 11 Laptops (Nearby Sharing & Swift Pair Hardening)¶

1. Open Settings -> System -> Nearby sharing and select Off.
2. Open Settings -> Bluetooth & devices -> Devices and uncheck Show notifications to connect using Swift Pair (which stops spoofed Bluetooth peripheral popups in coffee shops and airports).

--- .

Phase 2: Activating and living with Apple Lockdown Mode (The Zero-Click Shield)¶

Introduced in iOS 16, iPadOS 16, macOS Ventura, and expanded in iOS 17/18+ and watchOS 10+, Apple Lockdown Mode is one of the most consequential defensive engineering achievements in consumer cybersecurity history. Independent forensic validations by The Citizen Lab (University of Toronto) and Amnesty International's Security Lab have confirmed on real-world targets that enabling Lockdown Mode has repeatedly blocked active, live $1,000,000+ zero-click Pegasus (BLASTPASS / . PWNYOURHOME) exploit attempts in the wild, and even pops up a live warning notification on the user's screen saying: "Lockdown Mode prevented an unknown contact from interacting with your device." ** .

1. What Lockdown Mode Actually Changes Inside Your iPhone, iPad, and Mac¶

Because zero-click mercenary spyware cannot ask you to click a link, it must exploit complex, legacy code parsers that run automatically in the background (such as font rendering engines, image/PDF previewers in iMessage, WebKit Just-In-Time JIT compilers, or 2G cellular basebands). Turning on Lockdown Mode surgically removes that entire attack surface across 8 hardware and software subsystems:

2. A bɛ se ka wuli cogo min na Lockdown Mode (Ani Cogo min na i bɛ se ka appli walima site web kelen min bɛ se ka da i kan)¶

1. Iphone walima iPad kan: Da Settings -> Privacy & Security da wuli -> I ka taa duguma yɛrɛ ka Lockdown Mode digi -> I bolo digi Turn On Lockdown Mode -> Kuma surun kalan ka Turn On & Restart -> I ka minɛn tɛmɛsira sɛbɛn.
2. Mac kan (macOS Ventura / Sonoma / Sequoia+): Da System Settings -> Privacy & Security -> Dabɔ ka taa duguma ka Lockdown Mode digi -> Turn On... -> Turn On & Restart digi.
3. Website walima Application kelen min bɛ se ka da i kan, n’o mago bɛ JIT JavaScript la (K’a sɔrɔ i ma Lockdown Mode dabila): Ni baarakɛyɔrɔ kɛrɛnkɛrɛnnen dɔ ka ɛntɛrinɛti dakun (i n’a fɔ Figma walima banki dashboard) karilen don Safari kɔnɔ bawo JIT walima taamasiyɛnw sɛbɛnnibolow bɛ bali:
4. Safari kɔnɔ, i ka Page Settings (AA or Puzzle/Menu icon) in the address bar -> Tap Website Settings -> Toggle OFF Enable Lockdown Mode for only that single trusted domain.
5. For a specific installed iOS App: Go to Settings -> Privacy & Security -> Lockdown Mode -> Configure Web Browsing and exclude only that single verified app.

--- .

Phase 3: Android Advanced Protection & 2G Cellular Disable for High-Risk Users¶

If you use an Android smartphone (especially a Google Pixel 8 / 9+ or Samsung Galaxy S23 / S24 / S25+), enable these built-in hardware and OS zero-click defenses right now:

1. Kill the 2G / GSM Baseband Downgrade Vector:
2. Open Settings -> Network & internet -> SIMs -> [Your Carrier] -> Scroll down to Allow 2G ani k’a wuli OFF (Samsing Galaxy kan: Labɛnw -> Lakanali ni danbe -> Auto Blocker -> Dantigɛli caman).
3. Mun na nin nafa ka bon: Fake cell towers (Stingrays / IMSI-catchers) ani SMS Blaster wotoroninw bɛ telefɔni kɛrɛfɛtaw wajibiya u ka bɔ 5G/LTE sirilen na fo ka se san 1990 waati ma ** .2G (GSM)**, min tɛ ni ɲɔgɔn cɛ sankanso dantigɛli ye, o b’a to binkannikɛlaw bɛ se ka SMS kodew minɛ ani ka baseband exploits pikiri kɛ.
4. Aw ye Samsung daminɛ Auto Blocker & Maximum Restrictions (UI kelen 6+):
5. Samsung Galaxy telefɔniw kan, i bɛ Settings -> Security and privacy -> Auto Blocker da wuli k’a wuli ON. O bɛ USB kabɔri data-injection binkanniw bali, ka sideloading bali .APK dosiyew, ani ka Message Guard (cɛncɛn kɛsu ye min bɛ zeru digi yɔrɔ kelen na, min bɛ ja jugu filenw minɛ Samsung Messages, Google Messages ani WhatsApp kɔnɔ sanni u ka se ka maga sistɛmu hakili la) baara.
6. Aw ka da Memory Tagging Extension (MTE) Google Pixel 8 / 9+ kan:
7. ARM v9 matériel Hakilila Tagging Extension (MTE) bɛ buffer overflows ani use-after-free memory corruption kɔlɔsi waati yɛrɛ la CPU silicon level la, ka zero-click exploit dɔ tiɲɛ mikrosekɔndi kɔnɔ a b’a ɲini ka hakilijagabɔ ladɛrɛsi kɛrɛfɛ dɔ sɛbɛn. A daminɛ Labɛnw -> Lakanali & danbe -> Lakanali & danbe caman -> Hakilila taamasiyɛn (walima Developer Options / Advanced Protection kɔnɔ).
8. I tɔgɔ sɛbɛn ka... Google Advanced Protection Program (APP):
9. Ka taa bɔ https://landing.google.com/advancedprotection/ walasa k’i ka Google Jatebɔsɛbɛn datugu ni FIDO2 Hardware Keys/Passkeys wajibiyalenw ye, i ka OAuth porogaramu sabananw bɛɛ bali minnu tɛ da u la (aw ye a lajɛ OAuth sɔnna ka fili ani ka mɔgɔ sabananw ka appli ka yamaruya juguw bɔ yen), ani ka Play Protect sɛgɛsɛgɛli jugumanba waleya.

--- .

Fasa 4nan: Mercenary Spyware (Amnesty MVT & iVerify) .¶

Ni i ye kunnafonidilaw, walekɛla, sariyatigi, walima ɲɛmɔgɔba ye ani i ye Apple Threat Notification email/iMessage ofisiyali sɔrɔ (ani ka pankarti dɔ ye n’i donna a kɔnɔ, o bɛ kɛ cogo di appleid.apple.com walima account.apple.com), WAALIMA i ka telefɔni bɛ bɛnkansɛbɛnw jira minnu bɛ taa ɲɛ (a bɛ daminɛ kokura a yɛrɛma, batiri bɛ dɔgɔya kojugu k’a sɔrɔ nɛnɛ bɛ a la ani k’a sɔrɔ a ma baara kɛ, walima kunnafoniw baara bɛ caya ka se IP dɔnbaliw ma)?

Forensic triage senfɛ-senfɛ ni Amnesty International ka baarakɛcogo ye MVT (Mobile Verification Toolkit) .¶

Aw kana aw kana telefɔni ko dɔrɔn fɔlɔ ni aw mago bɛ a la k’a jira ko Pegasus, . Predator, walima Triangulation tun bɛ yen, bawo ko ni u ko, o bɛ kiritigɛlaw ka fɛnw tiɲɛ, Citizen Lab walima Amnesty International mago tun bɛ minnu na: 1. Telefɔni daminɛ kokura siɲɛ kelen ka daminɛ Lockdown Mode: O bɛ RAM-resident exfiltration active jɔ ka sɔrɔ ka disiki kan diagnostic logs mara (Shutdown.log, . DataUsage.sqlite, . DiagnosticPipeline, . WebKit cakɛdaw, ani SMS.db tabali minnu bɛ fara ɲɔgɔn kan). 2. Amnesty International ka Free, Open-Source sigi sen kan MVT (Mobile Verification Toolkit) min bɛ Linux walima macOS Ɔridinatɛri saniyalen dɔ kan: .

# Install MVT via pipx or Python 3 venv on macOS or Linux:
pip3 install mvt

# Download the latest public Indicators of Compromise (STIX2 IoCs for Pegasus, Predator, Reign, etc.) from Amnesty's repository:
mvt-ios download-iocs

# 1. Create an encrypted local backup of the iPhone using libimobiledevice (or Finder) to a folder:
idevicebackup2 backup --full ~/Desktop/iphone_forensic_backup/

# 2. Decrypt the backup using your backup password and run MVT's full forensic check against known spyware IoCs:
mvt-ios decrypt-backup -p "YourBackupPassword" -d ~/Desktop/decrypted_backup/ ~/Desktop/iphone_forensic_backup/
mvt-ios check-backup --iocs ~/Library/Application\ Support/mvt/indicators/ -o ~/Desktop/mvt_results/ ~/Desktop/decrypted_backup/

--- .

Ɲininkali minnu bɛ kɛ tuma caman na¶

Yala ni i ye Bluetooth ni Wi-Fi faga iPhone Control Center kɔnɔ, o bɛ Flipper Zero popups walima wireless tracking jɔ wa?¶

Ayi, n’i y’i bolo digi iOS Control Center kan ani ka Wi-Fi walima Bluetooth butɔni digi, o bɛ i ka iPhone ni i ka Wi-Fi routeur walima Bluetooth kungolodilanw tigɛ dɔrɔn fo ka se o dugujɛ 05h waati ma, k’a sɔrɔ i bɛ Wi-Fi fila bɛɛ mara (`AWDL`) ani bulutu fanga dɔgɔyalen (`BLE`) radio chips physically powered on in the background to support AirDrop, AirPlay, Find My, and Apple Watch communication. Because the BLE radio is still listening, a Flipper Zero BLE advertising flood in the same room will continue popping up fake AirPods/Apple TV pairing cards on your screen. To completely power down the radios, open the main **Settings** app and toggle **Bluetooth** and **Wi-Fi** to **Off**.

If a stranger on a train or plane sends me an unsolicited AirDrop or Quick Share photo and I tap "Decline," could my phone still be infected with a virus?¶

On any modern, updated iPhone or Android smartphone, tapping **Decline** on an AirDrop or Quick Share transfer discards the file before it is saved to your user storage and will not infect your phone with malware. However, because AirDrop renders a preview thumbnail on your screen before you tap Decline (which is how "cyber-flashing" harassment works, and why image parsers are a target for advanced researchers), you should never leave AirDrop set to *Everyone* or Quick Share set to *Everyone*. Keep **AirDrop** set to **`Receiving Off`** (walima **`Contacts Only`**) so strangers cannot even trigger a preview prompt on your screen.

Should every regular smartphone user turn on Apple Lockdown Mode every day?¶

Most ordinary consumers do not need to run `Lockdown Mode` 24/7 unless they are at elevated risk of targeted espionage (such as journalists, lawyers, executives, political campaign staff, activists, cryptocurrency whales, or domestic violence survivors facing an unusually technical adversary) or are traveling through a high-risk border or jurisdiction. However, Lockdown Mode is surprisingly livable for daily use: your phone calls, regular text messages, WhatsApp/Signal chats, camera, Maps, Apple Pay, and App Store apps all continue working normally; you simply lose automatic iMessage link previews, unknown FaceTime callers, and wired USB charging-port data while locked (and you can easily exclude any specific trusted website that needs fast JIT JavaScript).

Why do security agencies tell you to "Reboot Your Phone Daily" to defend against Pegasus and zero-click spyware?¶

Both the United States National Security Agency (NSA) Mobile Device Best Practices and Amnesty International's Security Lab recommend rebooting smartphones regularly because modern zero-click spyware (`Pegasus`, . `Predator`) costs millions of dollars to develop and avoids writing permanent files to the cryptographically signed `/system` disk partition where boot-time Integrity Verification (`Secure Boot` / . `dm-verity`) would detect it. Instead, the spyware lives strictly inside volatile **RAM** after exploiting a message or browser process. Turning your phone completely off and back on wipes volatile RAM clean, destroying the active implant and forcing the attacker to risk detection by firing another zero-click exploit (which fails completely if you also turn on **Lockdown Mode** or update iOS/Android).

--- .

Gafe minnu bɛ tali kɛ o ko la¶

• Stalkerware, spyware ani don dogolenw dɔnni telefɔniw kan
• Public Wi-Fi, Evil Twin hotspots, and USB juice-jacking defense
• Zero-day exploit emergency patching and End-of-Life device isolation
• GPS tracker and AirTag stalking detection
• Session cookie hijacking, infostealer malware, and passkey revocation
• Global emergency numbers

--- .

Sosow sɛgɛsɛgɛra¶

• National Security Agency (NSA) & Cybersecurity and Infrastructure Security Agency (CISA) (United States): Mobile Device Best Practices and Mobile Communications Security Guidance for High-Risk Individuals.
• Apple Inc. (International): Apple Platform Security Guide (Lockdown Mode Architecture, iMessage BlastDoor Sandbox, AWDL / AirDrop Cryptographic Identity Handshake, and Threat Notification Protocols).
• The Citizen Lab (Munk School of Global Affairs & Public Policy, University of Toronto) (Canada): Technical Forensic Reports on FORCEDENTRY, . BLASTPASS, . PWNYOURHOME, and Real-World Validation of iOS Lockdown Mode.
• Amnesty International Security Lab (International): Mobile Verification Toolkit (MVT) Documentation and Forensic Methodology for Detecting Pegasus ani Predator Mercenary Spyware.
• Google Threat Analysis Group (TAG) & Android Security Engineering (International): Android Memory Tagging Extension (MTE), 2G Baseband Disablement, and Commercial Surveillance Vendor Threat Reports.