Liquid Glass Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
January 13, 2026
Last Seen
January 18, 2026

Liquid Glass is a malware family tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed January 13, 2026; most recent activity January 18, 2026.

Overview

Liquid Glass is an iOS-focused malware/exploit family that has been used to compromise iPhone devices. Recent reporting ties the threat to active exploitation, with Apple issuing a security update (iOS 26.2) to patch vulnerabilities associated with Liquid Glass, underscoring the importance of keeping devices up to date to mitigate targeted attacks.

Related Threat Clusters

  • Apple iOS 26.2 Security Update Targets Spyware on iPhones

    Apple has released the iOS 26.2 security update to address vulnerabilities affecting iPhone users. Security researchers indicate that while rebooting devices may temporarily stop certain spyware, the software update…

    1 article · Updated January 18, 2026
  • Active Exploitation of WebKit Vulnerabilities in iOS 26+

    Apple has confirmed the active exploitation of two WebKit zero-day vulnerabilities in iOS, affecting iPhone users. Users are urged to update to iOS 26+ to receive full protections, as the vulnerabilities allow attackers…

    2 articles · Updated January 26, 2026

Recent Intelligence Reports

  • Apple iPhone users may have to update now as iOS 26.2 security push hits “Liquid Glass” holdouts — Bez-Kabli.Pl · January 18, 2026
  • Why iPhone users should update and restart their devices now — Blog.Malwarebytes · January 13, 2026

Related Entities

CVSS v3.1 Breakdown