|11 Mar 2014||#1|
| || |
Watch Out! Invisible Profiles Can Hack Your iPhone
I'll probably never forget the day that Skycure hacked my phone as part of a demo. Within just a few minutes, company founder Yair Amit was telling me what I was seeing on my screen, despite being on the other end of a telephone. Then he took total control, and I was helpless. It was a sobering experience, and new research from Skycure shows that it could get even worse.
The Invisible Hand
In order to hack my iPhone, Skycure first needed to trick me into installing a malicious configuration profile. Normally, configuration profiles are used to do things like change VPN and email settings. Most users will probably never have to deal with them, let alone worry about malicious ones hijacking their phones. Thankfully, the profiles are easy to remove. All you had to do was delete wonky the profiles if something seemed odd and you were fine.
Not so anymore, says Amit. Building off existing research, Skycure's Asaf Hefetz discovered a vulnerability that let malicious profiles do more than hide in plain sight. With it, Skycure was able to create malicious profiles that were totally invisible to the user. The profile was also hidden from mobile device management (MDM) systems, like the ones used by corporations to support employees using their own devices for work.
|My System Specs|
|Similar help and support threads for2: Watch Out! Invisible Profiles Can Hack Your iPhone|
|iPhone 4s 32gb or iPhone 5 16gb||Chillout Room|
|Sync Outlook with Iphone display in Iphone name from outlook: FILE AS:||Microsoft Office|
|Multiple Printer Profiles; Deleting Unneeded Profiles||Performance & Maintenance|
|Is 'iPhone Video' the Name of the Next iPhone?||Chillout Room|
|Our Sites ||Site Links ||About Us ||Find Us |
© Designer Media Ltd
All times are GMT -5. The time now is 10:25 AM.