Magnet Forensics Sues Paradigm Shift Over Alleged Theft of Exploit Trade Secrets

Lawsuit Filed Over Exploit Publication

Magnet Forensics has initiated legal proceedings against Paradigm Shift Technology concerning the publication of usbliter8. The lawsuit claims that this unpatchable exploit, which targets several Apple SoCs, was developed using proprietary information misappropriated by a former Magnet engineer.

Details of the usbliter8 Exploit

Last month, Paradigm Shift researchers disclosed usbliter8, an iPhone BootROM vulnerability allowing arbitrary code execution on devices with Apple's A12 and A13 chips. The bug affects A12, S4, S5, and A13 SoCs, leveraging specially crafted data to confuse the device's USB controller. This grants an attacker physical access and control over the startup process, enabling them to run code before iOS loads, bypass signature checks, and boot modified system software. As a BootROM exploit, it cannot be fixed via software updates, though its impact is limited to older chips from 2018 and 2019.

Allegations of Trade Secret Misappropriation

Magnet Forensics asserts that usbliter8 originated from confidential work performed by Mario Del Gaudio, a former Exploit Engineer at Magnet, who later joined Paradigm Shift. According to the lawsuit, Del Gaudio worked on a sensitive proprietary capability internally designated as "MSG" at Magnet Forensics. Magnet claims that Paradigm Shift's detailed technical blog post on usbliter8 describes a capability substantially identical to the MSG project Del Gaudio worked on.

Legal Action and Demands

Magnet Forensics states it possesses evidence linking Del Gaudio directly to the usbliter8 publication. The company also claims Paradigm Shift has ignored multiple cease-and-desist demands to remove the publication and associated proof-of-concept code. The lawsuit seeks to address the alleged misappropriation of trade secrets and the continued public availability of the exploit details.