The attack makes use of previously disclosed critical vulnerabilities in the Apple Safari web browser and iOS.
Source: Threadpost