3 ms·
Any way to check if my iPhone is affected? I'm still on 12.1.2, which was released before the fix, so if I'm affected, I should still have the malware on my dev
by sgjohnson 7y ago
Any way to check if my iPhone is affected? I'm still on 12.1.2, which was released before the fix, so if I'm affected, I should still have the malware on my device.
I'm not opposed to jailbreaking to check.
- deleted 7y ago[deleted]
- iandinwoodie 7y agoThe implant binary does not persist on the device; if the phone is rebooted then the implant will not run until the device is re-exploited when the user visits a compromised site again. [1] 1. https://googleprojectzero.blogspot.com/2019/08/implant-teardown.html https://googleprojectzero.blogspot.com/2019/08/implant-teard...
- eranation 7y agoJust important to note that restarting the device is not the end of it. "Given the breadth of information stolen, the attackers may nevertheless be able to maintain persistent access to various accounts and services by using the stolen authentication tokens from the keychain, even after they lose access to the device." I would recommend checking your login history / OAuth permissions to anything you had in your keychain, changing passwords for anything critical you used on your device if you suspect you were infected, a restart won't undo stolen information.
- celeritascelery 7y agoIf you have restarted your iPhone at any point, it will wipe the malware.