The “secret iPhone feature” was undocumented behavior in Apple system-on-chip hardware that attackers used to bypass hardware memory protections. It was not a setting users could turn off—and it was only one stage of Operation Triangulation, a spyware attack that Kaspersky says began with a zero-click iMessage exploit.
What was the secret iPhone feature?
Kaspersky said the attackers used previously unknown memory-mapped I/O (MMIO) addresses and an undocumented hardware feature in Apple’s system-on-chip (SoC) to manipulate protected memory. MMIO lets software communicate with hardware through mapped addresses; in this case, Kaspersky’s analysis found that access to particular addresses could be used to get around hardware-based memory protections.
Kaspersky said the feature may have been intended for testing or debugging, but its purpose has not been confirmed in the material available. The disclosure does not establish that Apple deliberately built a spy feature or a backdoor. Kaspersky described how its researchers reverse-engineered device-tree files, source code, kernel images and firmware to investigate the unknown addresses. Kaspersky’s December 2023 disclosure links the hardware issue to CVE-2023-38606.
How did the attack work without a tap?
The hardware bypass was not the initial infection. Kaspersky described a chain that started with a malicious attachment delivered through iMessage, then used software vulnerabilities to execute code and escalate privileges before the attackers used the hardware feature to manipulate protected memory. “Zero-click” means, in Kaspersky’s account, that the recipient did not need to open or interact with the initial message.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- [2 Pack] This product includes 2 pack privacy screen protectors.WORKS FOR iPhone 17e/16e/14/iPhone 13/13 Pro 6.1 Inch tempered glass screen protector.Featuring maximum protection from scratches, scrapes, and bumps.[Not for iPhone 16 6.1 inch, iPhone 13 mini 5.4 inch, iPhone 13 Pro Max/iPhone 14 Pro Max/iPhone 14 Plus 6.7 inch, iPhone 14 Pro 6.1 inch]
- Specialty: to enhance compatibility with most cases, the Tempered glass does not cover the entire screen. HD ultra-clear rounded glass for iPhone 17e/16e/14/iPhone 13/13 Pro is 99.99% touch-screen accurate.
- 99.99% High-definition clear hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints.
- High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
- Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.
- Initial entry: A malicious iMessage attachment triggered the first exploit without requiring the recipient to tap it.
- Further exploitation: The attackers used additional iOS vulnerabilities to gain greater control.
- Hardware protection bypass: The undocumented SoC/MMIO behavior let them manipulate protected memory, helping complete control of the device.
- Spyware activity: Kaspersky reported data collection, including microphone recordings, photos, geolocation and other information.
These are stages in Kaspersky’s account of this campaign, not evidence that every iMessage attachment—or every iPhone—was affected. Eugene Kaspersky described the entry stage as an “invisible iMessage with a malicious attachment” that exploited iOS vulnerabilities and installed spyware in his June 2023 incident account.
What did the TriangleDB spyware do?
Kaspersky’s analysis of the implant it called TriangleDB described an in-memory operation: the spyware ran in device memory rather than persisting as a conventional installed app. Kaspersky said its analyzed implant had 24 commands, collected device data, and automatically removed itself after 30 days if the device had not rebooted—unless the attackers extended that period. Those figures describe the implant Kaspersky analyzed, not a universal count or lifespan for spyware.
Rank #2
- [3 Pack] This product includes 3 pack privacy screen protectors.WORKS FOR iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch tempered glass screen protector. Due to the rounded edge design of the iPhone 16/iPhone 15/iPhone 15 Pro and to enhance compatibility with most cases,the tempered glass screen protectors will be slightly smaller than the phone screen.[Not for iPhone 16e 6.1 inch, iPhone 15 Plus/iPhone 15 Pro Max/iPhone 16 Plus 6.7 inch,iPhone 16 Pro 6.3 inch,iPhone 16 Pro Max 6.9 inch]
- Specialty: HD rounded glass for iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch is 99.99% touch-screen accurate.
- 99.99% High-definition hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints. Featuring maximum protection from scratches, scrapes, and bumps.
- High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
- Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.
Kaspersky’s June 21, 2023 TriangleDB summary also said traces disappeared after a reboot. That is a description of the analyzed campaign’s behavior; it does not establish that a reboot alone is a reliable current cleanup method or that a reboot proves a device was never compromised.
Which iOS versions and vulnerabilities did Kaspersky identify?
Kaspersky associated the hardware issue, CVE-2023-38606, with iOS versions up to iOS 16.6 and said Apple addressed it. The same December 2023 disclosure said Apple released updates addressing four zero-day vulnerabilities identified by Kaspersky’s researchers:
Rank #3
- Perfect Fit for iPhone 17 Pro Max：Engineered exclusively for iPhone 17 Pro Max with seamless edge-to-edge coverage, ensuring precise alignment and reliable full-screen protection.
- Advanced Privacy Protection：Features a 28° privacy filter with smooth 2.5D curved edges, preventing side glances in public. Your screen remains visible only to you—ideal for commuting, traveling, and crowded environments.
- Effortless Installation：Equipped with an auto dust-elimination tool that delivers a fast, accurate, and bubble-free application, keeping your screen perfectly clear with minimal effort.
- Military-Grade Protection：Made of nano-reinforced 9H tempered glass, SGS certified. Provides 5X stronger scratch resistance and proven durability, withstanding thousands of pressure and impact tests.
- Smudge & Fingerprint Resistant：Hydrophobic and oleophobic coating repels fingerprints, sweat, and oil—ensuring your screen stays clean, clear, and smooth to the touch.
| CVE | What the cited disclosure establishes |
|---|---|
| CVE-2023-32434 | Named by Kaspersky among the four vulnerabilities Apple addressed. |
| CVE-2023-32435 | Named by Kaspersky among the four vulnerabilities Apple addressed. |
| CVE-2023-38606 | The SoC/MMIO hardware issue; Kaspersky said it affected iOS versions up to 16.6 and that Apple addressed it. |
| CVE-2023-41990 | Named by Kaspersky among the four vulnerabilities Apple addressed. |
The cited disclosure does not provide a complete device-by-device exposure list or the exact Apple release versions for all four CVEs. It therefore does not support a definitive list of every affected iPhone model. Kaspersky’s June 1, 2023 announcement said devices belonging to dozens of its employees had been targeted; that is the company’s reported incident scope, not an independently verified global victim count. The company said its products, customer data and critical processes were not affected. Kaspersky’s campaign announcement gives that initial account.
Did Apple fix the iPhone vulnerability?
Kaspersky said Apple addressed CVE-2023-38606 and mitigated the hardware feature. Its disclosure supports saying the issue was addressed, but it does not provide enough detail to map every affected device to a specific update version. If you are concerned about device security, use Apple’s current software-update guidance and keep a supported device updated; the cited Kaspersky material is not a current device-specific update matrix.
Rank #4
- 【Industry-Leading 100% Anti-Spy Privacy Protection】Designed for iPhone 17 Pro. Larger iPhone screens are easier for others to glance at, so UltraGlass uses patented, SEGI-certified 25° Blackout-3 optical technology to help block side views and keep emails, banking apps, and private content visible only to you—while keeping the front view HD-clear and comfortable through hours of scrolling and streaming.
- 【Unbreakable TOP 9H+ Glass, the Excellent 2nd Screen for Your iPhone】Boasting unparalleled shatter resistance and durability. And the core excellence is the top 9H+ tempered glass material, which is widely applied in aerospace and military fields for its ① Shatter-proof ② Scratch & Wear Resistance ③ Durability that is 7-8 times higher than other materials. Thus, UltraGlass builds a second tough screen for your iPhone 17 Pro.
- 【Industry NO.1 Military-Grade Shatterproof】Authorized by the International Military Standard with 50+ rigorous engineering tests of 220 lbs impact, 8,000+ drop tests, 20,000+ scratch tests, etc., its strength, toughness and durability perform NO.1 among all glass. By especially breaking the industry's record with a 12ft drop, the iPhone 17 Pro screen protector is ensured to be unbreakable from its surface to every edge and corner!
- 【Invisible Armor, 1:1 Full Covers the iPhone's Screen】Mimicking the iPhone's original screen design, it uses a 1:1 3D curved reinforced black edge that wraps around every curve — case friendly — while securing even the most vulnerable edges. Seamlessly blending with the iPhone 17 Pro screen, it's virtually invisible and feels like the original screen while offering enhanced full-screen protection!
- 【0 Bubbles + 0 Dust + 0 Misaligned =100% Successful Installation】Includes everything you need with pioneering automatic positioning, dust removal, and absorption technology, making the installation just effortlessly easy in seconds. No bubbles, no troubles—transforming beginners into experts.
Can you check whether an iPhone was infected?
In June 2023, Kaspersky released triangle_check, a utility for macOS, Windows and Linux that scanned an iPhone backup for indicators associated with Operation Triangulation. Kaspersky’s release described scanning a backup, not a live iPhone, and the available source does not establish the utility’s present-day compatibility or support status. A scan that found no indicators was not presented as proof that a device could never have been compromised.
Kaspersky’s release instructions said to back up the device first and treated “SUSPICION” as less conclusive than “DETECTED.” Those labels and steps belong to the historical utility guidance, so do not assume the old tool is currently supported or that its results settle a present-day security concern. See the June 2, 2023 triangle_check announcement for what Kaspersky said the utility did.
Best Value
- 【Innovative 1-Step Installation! 】Simplify the application process! Featuring automatic alignment functionality, enjoy a quick and easy installation,swiftly eliminate air bubbles, providing you a hassle-free installation experience for the iPhone 16 Pro Max privacy screen protector.Friendly Reminder: Please watch the installation video before you begin.
- 【Indestructible Ultra 9H Glass for Ultimate Protection】With nearly diamond-like 9H hardness, this privacy screen protector for iPhone 16 Pro Max effectively avoids shattering, cracking, and scratches. It is up to 4X stronger than traditional tempered glass protectors and reliably protects the entire phone screen from compression and other impacts.
- 【Ultra-Clear and Ultra-Sensitive】This protective film covers the iPhone 16 Pro Max 6.9-inch, ensuring you feel as if there's nothing on your iPhone screen.The high-quality anti-fingerprint surface keeps your screen clean, bubble-free, delivering the most natural viewing and sensitive touch for videos and gaming.
- 【26° Anti-Spy Privacy Protection】Featuring upgraded micro-louver optical technology, this iPhone 16 Pro Max privacy screen protector delivers a precise 26° privacy viewing angle. It maintains ultra HD clarity from the front view, while instantly darkening the screen for anyone viewing from the sides or behind.
- 【Professional After-Sales Support】Each package contains 4 privacy screen protectors for the 6.9-inch iPhone 16 Pro Max. We also offer a 365-day warranty service. We provide free replacement support for installation failures caused by product defects, size mismatch, or other verified quality issues. Please feel free to contact our customer support team for assistance.
Who was behind Operation Triangulation?
The sources cited here establish that Kaspersky disclosed and analyzed the campaign; they do not identify its operator. The available evidence does not justify naming a hacking group or attributing the operation to a government.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
