GCSA(@GCSA_COM):The GCSA Security Team discovered that two statistics nodes on Aizhan (node96/node90.aizhantj.com) were dynamically loading hidden malicious scripts targeting Apple iOS devices. The covert attack chain loads a hidden iframe running in-static.js to trigger WebKit memory corruption and GPU sandbox escapes—potentially stealing device data, Keychains, and crypto wallets. Aizhan responded swiftly, patched the vulnerability, and fully hardened their systems. iPhone users are urged to update to the latest iOS release immediately. Read the full technical analysis & IOCs: 🔗https://t.co/Zj57RbkiJl #GCSAInsights

2026.11.08 20:26

The GCSA Security Team discovered that two statistics nodes on Aizhan (node96/node90.aizhantj.com) were dynamically loading hidden malicious scripts targeting Apple iOS devices. The covert attack chain loads a hidden iframe running in-static.js to trigger WebKit memory corruption and GPU sandbox escapes—potentially stealing device data, Keychains, and crypto wallets. Aizhan responded swiftly, patched the vulnerability, and fully hardened their systems. iPhone users are urged to update to the latest iOS release immediately. Read the full technical analysis & IOCs: 🔗 #GCSAInsights#