We stand with Ukraine to help keep people safe. Join us

Tags Malware Threats Malware

How to Detect Pegasus Spyware on iPhone

Imagine someone accessing your photos or recording your private calls without your knowledge. That’s what Pegasus spyware allows intruders to do once it has been installed on your device. Stealthy by nature, it silently extracts your personal data, even bypassing Apple's security measures. Scary, right? Read this guide for essential tips on detecting Pegasus spyware. Also, use Clario Anti Spy’s Device system check feature to scan for jailbreaks.

Table of contents

What is Pegasus Spyware

Pegasus is a progressive spyware created by the Israeli company NSO Group. When it infects your phone, it grants unauthorized access to your calls, messages, location, and other private data. Worse still, Pegasus works undetected. For instance, it can activate your microphone to eavesdrop on conversations or turn your camera on without you knowing. Basically, it transforms your iPhone into a 24/7 surveillance device where you are the target.

 

The software’s initial purpose was to track criminals and terrorists. Today, it can be misused to target vulnerable groups—journalists, activists, and private individuals—like you.  

How Pegasus Spyware works on iPhone

Pegasus spyware usually accesses iPhones through a zero-click exploit, which means it can infect your device without requiring any action from you. Even receiving a message could be enough to compromise your device. It extracts data and transmits it to a server where attackers can access it. If the spyware cannot connect to the hacker’s server, it holds the data hidden and encrypted within the phone’s storage instead.

 

Here’s what Pegasus can do once it gets access to your device:

  • Read your text messages and emails
  • View your photos, videos, and contacts
  • Track your location in real time
  • Record audio or calls without your knowledge

It is unsettling to think​​ someone could be listening to your conversations via your mobile. To stop someone from listening to your phone calls, consider using messaging and calling apps that offer end-to-end encryption, such as Signal. This will make it much harder for any snooper using Pegasus to intercept your communications.

Signs your iPhone is infected with Pegasus Spyware

Telltale signs that indicate Pegasus spyware activity on your iPhone include unexpected battery draining, overheating, or lagging performance. Keeping an eye on these indicators is your first step to safeguarding your device.

 

Let’s look closer at potential red flags that can help you detect Pegasus spyware on your iPhone.

1. Increased data usage

Experiencing unusually high data consumption? This may mean Pegasus spyware is transmitting your private data to an external server in the background. Consider checking how much mobile data you’ve used.

 

Here’s how to do it:

  1. Go to Settings.
  2. Tap Mobile Service and scroll down to see Mobile Data.
The iPhone's settings open with the Mobile Service feature highlighted. The Mobile Data feature is also highlighted. Use Clario Anti Spy's Device system check to find Pegasus spyware on the iPhone.
Step 1-2: Settings > Mobile Service.

2. Unusual battery discharge

If your battery suddenly drains much faster than usual, it could be due to spyware running processes in the background. To check for Pegasus spyware on your iPhone, monitor your battery life.

 

Here’s how to do it:

  1. Go to Settings.
  2. Tap on Battery to review app usage.
  3. Check battery activity per app for the last 24 hours or 10 days.
The iPhone's settings open with the Battery feature highlighted. Data on battery use by app. Use Clario Anti Spy's Device system check to find Pegasus spyware on the iPhone.
Step 1-3: Settings > Battery > Battery use by app.

3. Low performance

Are your apps freezing or slowing down? This could be a sign of unauthorized processes restricting your device’s performance.

Note

While iOS vs. Android security differs, both operating systems are susceptible to Pegasus spyware. Android’s open-source nature makes it even more vulnerable, especially if devices are not regularly updated with the latest operating software.

How Pegasus Spyware infects iPhone

Pegasus exploits hidden vulnerabilities in apps like iMessage or Safari, bypassing safeguards to infiltrate your phone. For instance, a malicious iMessage could execute an attack even if left unopened.

 

Here are the tactics Pegasus employs:

  1. Zero-click exploits: Vulnerabilities in iMessage or FaceTime allow Pegasus to infiltrate your device without any action from you.
  2. Phishing links: Malicious texts or emails carrying deceptive links can install spyware if you click on them.
  3. Jailbreaking: Some versions of Pegasus exploit jailbreaking to bypass iOS security protections.

A jailbroken iPhone loses its vital security layers that should normally protect your personal information. Without it, hackers can:

  • steal your data
  • damage your device
  • attack your network
  • install malware, spyware, or viruses.

No worries, though, as we have the solution. Clario Anti Spy’s Device system check feature scans your device for signs of security threats, such as a jailbreak. It allows you to check whether anyone has sidestepped Apple’s security policy to gain unauthorized access to it. It also checks if the operating system runs on its latest updated version.

 

Here’s how to use Clario Anti Spy’s Device system check:

  1. Install Clario Anti Spy on your mobile phone and set up an account.
  2. Tap Scan under the Device system check feature.
  3. Check the results of your operating system scan.
The Clario Anti Spy app runs the Device system check feature on iPhone. Use Clario Anti Spy's Device system check to find Pegasus spyware on iPhone.
Steps 1-3: Download Clario Anti Spy > Device system check > Scan.

How to check Pegasus Spyware on iPhone

To find Pegasus spyware on iPhone, you need to monitor your device performance, analyze activity logs, and run a Clario Anti Spy’s Device system check to scan for jailbreaking. Also, watch out for unusual changes in your iPhone’s battery life, app behavior, and data usage.

 

Remember that Pegasus malware is challenging to detect. Standard commercial anti-malware software and even cybersecurity experts sometimes struggle to find it. Specialized tools, like the Mobile Verification Toolkit (MVT), are available, but they are mostly useful for cybersecurity professionals.

Note

The good news is Pegasus’ advanced features also make it expensive. Unless you’re a journalist, activist, politician, etc., the likelihood of your device being targeted is extremely low.

How to protect your iPhone from Pegasus Spyware

Prevention is better than a cure. Today, there are things you can do to protect your phone from hacking and avoid falling victim to spyware attacks.

1. Use strong passwords and multi-factor authentication

Create unique passwords that combine letters, numbers, and symbols. For accounts linked to your iOS device, like iCloud, enable two-factor authentication (aka, 2FA). It makes it harder for unauthorized access to occur. Even if someone gets hold of your password, they’ll still need to pass the second verification step. This additional step could be the difference between safety and intrusion.  

2. Keep your iPhone up to date

Pegasus is known to target unpatched systems. The good news is Apple regularly releases updates to patch vulnerabilities. Keep an eye on those new releases—installing the latest update strengthens your device's defense against malware like Pegasus.

 

Here’s how to check for iOs updates:

  1. Go to Settings, then General.
  2. Tap on Software Update.
  3. If you see fresh updates available, tap Install Now.
Settings menu on iPhone with General feature and Software update highlighted. Use Clario Anti Spy's Device system check to find Pegasus spyware on iPhone.
Step 1-3. Settings > General > Software Update.

Tip

Clario Anti Spy's Device system check can also analyze your operating system to check for outdated software and help you keep up with the latest security updates and patches.

3. Beware of phishing and malware

Phishing emails, texts, or links that look legitimate often contain malicious software. Always verify the sender before engaging in any communication. Received an email or a text from an unknown sender and it contains a link or attachment? Don’t click the link. Better yet, delete it.  

4. Use antivirus software

Antivirus software offers real-time protection against spyware. Consider installing one to check your system for threats and suspicious activity. Stick to the Apple App Store when downloading, as apps here undergo strict vetting.

 

If you’re wondering, ‘Does a VPN protect you on public Wi-Fi?’ The answer is no—not from Pegasus. Still, it safeguards your online activities from prying eyes, adding an important security layer.

How to remove Pegasus Spyware from iPhone

To get rid of Pegasus spyware on iPhone, follow these steps:

  • Back up your data to iCloud or an external device before making significant changes to your iPhone.
  • Factory-reset your iPhone to remove spyware.
  • Reinstall software via DFU Mode to restore your iPhone to its original settings.
  • Update to the latest iOS to patch vulnerabilities and get better protection going forward.
  • Contact Apple Support for additional assistance.

Conclusion

Pegasus spyware serves as a stark reminder of how critical our mobile security has become. Safeguarding your iPhone and keeping your personal information private is possible if you stay vigilant and use the right tools.

 

Want to make your iPhone security airtight? Clario Anti Spy’s Device system check will scan your device for jailbreak and check if you’re using the latest iOS version.

Keep reading

Is someone spying on you?

Get started