Calif Hacks the iPhone at Hexacon Paris

Yesterday at Hexacon in Paris, a security team called Calif demonstrated something that should make every iPhone owner uncomfortable: a chain of 1-click exploits that hits Signal, then iMessage, and ends with what they call "Apple Persistent Threat," full persistence on a patched iOS device. The HN discussion blew up to 883 points and 576 comments within hours [1].

Calif's blog post is unusually short. No lengthy writeup, no CVE numbers, no technical breakdowns. Just four video demos and the line: "Everything will be released in due time." The brevity is the point. The demos speak for themselves [2].

The four demos

The first demo is a Signal 1-click exploit. Send a crafted message, the user taps once, and the attacker gets code execution inside the Signal app. Signal is end-to-end encrypted, but encryption protects the content in transit. Once the endpoint is compromised, the encryption is irrelevant. The attacker can read messages before they get encrypted or after they get decrypted [3].

The second demo targets iMessage. Calif's comment on this one is dry: "But who cares about a third-party app when everyone uses iMessage, right?" The implication is clear. If you thought switching from Signal to Apple's native messaging would protect you, it does not. The iMessage demo shows another 1-click exploit achieving code execution [4].

The third demo is the most unsettling. It shows the iPhone doing something it absolutely should not do, with the caption "Can your iPhone do this?" Without more technical detail, it is hard to say exactly what is happening, but the video makes it clear the device is under full attacker control [5].

The fourth demo is the punchline: "APT stands for Apple Persistent Threat." Persistence on iOS is supposed to be nearly impossible because of the secure boot chain and signed code requirements. If Calif has achieved reliable persistence, that assumption needs revisiting [6].

1-click, not 0-click

An important distinction from the HN discussion: these are 1-click exploits, not 0-click. The victim has to interact with something, probably opening a crafted PDF or tapping a link. This means they are not wormable in the way NSO Group's Pegasus 0-clicks were. But 1-click is still dangerous because social engineering is easy. A message that says "check this document" from a known contact is enough [7].

Several HN commenters asked about Lockdown Mode, Apple's optional high-security setting that restricts message attachments, web browsing, and other attack surfaces. The consensus is that Lockdown Mode would likely block the PDF-based vector used in the messaging exploits, since it blocks most message attachments automatically. But Lockdown Mode comes with real tradeoffs: some websites break, shared photo albums stop working, and certain apps lose functionality. One commenter noted that banking app icons fail to load because they are fetched from a blocked source [8].

What we do not know yet

Calif has not released CVE numbers, affected iOS versions, or the exploit chain details. The demos were at Hexacon, a security conference, which means the audience saw more than the videos show. The blog post says "everything will be released in due time," which usually means waiting for Apple to patch [9].

What we do know: the exploits work on current iOS, they chain from messaging apps to full device compromise, and they include persistence. That is a serious capability. The fact that it was demonstrated publicly at a conference rather than sold quietly to a government suggests Calif is a research team, not a commercial spyware vendor [10].

Practical takeaways

Until Apple patches these vulnerabilities, the standard advice applies but with sharper edges:

• Do not open unexpected attachments. This is true for any platform, but right now it is specifically true for iOS. A PDF from a contact whose account might be compromised is all it takes.
• Consider Lockdown Mode. If you are a high-risk user (journalist, activist, executive, or anyone who might be targeted), the tradeoffs are worth it. Several HN commenters report using it full-time with manageable friction [11].
• Update when Apple patches. Calif is sitting on these exploits, which means Apple is either already working on a fix or will be very soon. Watch for the next iOS security update.
• Signal is still better than SMS. A compromised endpoint defeats any encryption, but Signal's metadata minimization and disappearing messages still reduce the attack surface compared to plain text messaging [12].

The bigger picture

iPhone security has always relied on the assumption that the secure boot chain and App Store review make persistence extremely difficult and expensive. Calif's "Apple Persistent Threat" demo challenges that assumption directly. If persistence is achievable through a 1-click chain, the cost of targeting a specific iPhone user drops significantly [13].

The name is also a deliberate play on "Advanced Persistent Threat," the term used for nation-state level attackers who maintain long-term access to compromised systems. Calling it "Apple Persistent Threat" implies that iOS persistence is no longer the exclusive domain of intelligence agencies with 7-figure exploit budgets. A small research team did it and showed videos at a conference in Paris [14].

That is the part that should worry Apple. Not the exploit itself, which will be patched. But the demonstration that the security model has a crack wide enough for a small team to walk through. The walled garden is still a garden, but the walls are not as high as the marketing suggests.