I understood it that the initial attack vector required the target device to be unlocked. Once the malicious code was installed, the attacker could then gain co

I understood it that the initial attack vector required the target device to be unlocked. Once the malicious code was installed, the attacker could then gain complete control, including passcode unlock.