1-Click iPhone and Android Exploits Target Tibetan Users via WhatsApp

A sophisticated mobile hacking campaign dubbed Poison Carp targeted high-profile Tibetan users via WhatsApp using one-click exploits for iOS and Android devices. The attackers sent tailored malicious web links to its targets posing as NGO workers, journalists, and other fake personas, which, when opened, exploited web browser and privilege escalation vulnerabilities to install spyware on the devices