X

Why you should update your iPhone right now

Apple has just released a security update in response to a malware threat that turns your phone into a pocket spy.

Sarah Jacobsson Purewal Freelance Writer
Sarah is a freelance writer and CNET How To blogger. Her main focus is Windows, but she also covers everything from mobile tech to video games to DIY hardware projects. She likes to press buttons and see what happens, so don't let her near any control panels.
Sarah Jacobsson Purewal
2 min read
Watch this: Apple patches major flaws with iOS 9.3.5
dsc0014.jpg
Sarah Jacobsson Purewal/CNET

If you have an iPhone, you need to download the latest iOS updateright now.

Apple released the "important security update" in response to an active malware threat that can be used to read texts and email, record calls (including WhatsApp and Viber calls), track your location and turn on your phone's camera and microphone.

If that sounds terrifyingly invasive, that's because it is. The threat, dubbed "Trident" by mobile security firm Lookout, exploits three zero-day vulnerabilities in iOS 9 to form an "attack chain" that can break through Apple's (relatively) secure platform. According to University of Toronto's Citizen Lab, Trident is used in a spyware product developed by Israel-based "cyber war" company NSO Group (which is reportedly owned by an American venture capital firm).

Citizen Lab and Lookout became aware of the issue when links containing the Trident exploit and the spyware were sent to Ahmed Mansoor, a human rights defender based in the United Arab Emirates. Mansoor did not click on the links and instead forwarded the emails to Citizen Lab, but had he clicked on the links, his phone would have been remotely jailbroken and invaded by NSO Group's "government-exclusive" spyware. Upon confirming the zero-day iOS vulnerabilities, Citizen Lab and Lookout notified Apple -- and now Apple has released a fix.

How to update your iPhone

To see if you're running the latest, patched version of iOS 9, open the Settings app and go to General > About > Version. If it says 9.3.5, you're good. Anything else, and you need to update.

unnamed.png
Enlarge Image
unnamed.png
Sarah Jacobsson Purewal/CNET

To download and install the update, open the Settings app and go to General > Software Update. Your iPhone will check for the latest update automatically.

unnamed-1.png
Enlarge Image
unnamed-1.png
Sarah Jacobsson Purewal/CNET

Once the update has been found, tap Download and Install to begin the update process.

unnamed-3.png
Enlarge Image
unnamed-3.png
Sarah Jacobsson Purewal/CNET

You will need to enter your passcode (if you have one) and agree to iOS's terms and conditions.

The update should take just a few seconds to download and about two minutes to install.