Thanks, I wasn't aware of the latter, but looks like it requires a user to install a Windows client called 爱思助手 (Aisi Helper), purportedly for jailbreaking etc.

Thanks, I wasn't aware of the latter, but looks like it requires a user to install a Windows client called 爱思助手 (Aisi Helper), purportedly for jailbreaking etc., then connect their iOS device to a Windows PC running this software. So it's hardly a typical case. Reference: http://researchcenter.paloaltonetworks.com/2016/03/acedeceiver-first-ios-trojan-exploiting-apple-drm-design-flaws-to-infect-any-ios-device/ http://researchcenter.paloaltonetworks.com/2016/03/acedeceiv... Regarding the former, yes it may be possible to hardcode addresses for private APIs and target specific devices running specific iOS versions, but Apple routinely weeds these out. Edit: I assume Apple weeds these out. I have no reference for this. I realize it's not bulletproof, but it's still good enough to trust for me as an iOS user compared to the Android phone I was using until last year.