Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

ThatiPhoneKid

macrumors 6502a
Original poster
Aug 15, 2017
984
665
I was on my iPhone today and pressed on a link for a recipe, then it took me to a shady looking website and I imminently exited... I was wondering if my iPhone can get malware, spyware, viruses or keyloggers?

My phone is not jail broken

Thanks
 

now i see it

macrumors G4
Jan 2, 2002
10,585
22,082
That statement is no longer true.
Yes, while very uncommon, it's now possible for a nefarious website to infect an iPhone running any version of iOS. The good ole days are gone. To believe you're immune from malware just cuz it's an iPhone is foolish.
 

casperes1996

macrumors 604
Jan 26, 2014
7,392
5,463
Horsens, Denmark
It is technically posible but very unlikely, especially without explicitly allowing a profile through the Settings app. Most malicious software would also not not persist a reboot, so restart it and it’s clean. No need to worry just because there’s been a dodgy site. Most dodgy sites aren’t about malware either. They’re more about tricking you to willingly give up info
 
  • Like
Reactions: ApfelKuchen

ThatiPhoneKid

macrumors 6502a
Original poster
Aug 15, 2017
984
665
It is technically posible but very unlikely, especially without explicitly allowing a profile through the Settings app. Most malicious software would also not not persist a reboot, so restart it and it’s clean. No need to worry just because there’s been a dodgy site. Most dodgy sites aren’t about malware either. They’re more about tricking you to willingly give up info
Thank you all
[automerge]1572207511[/automerge]
What is Malware?
 

casperes1996

macrumors 604
Jan 26, 2014
7,392
5,463
Horsens, Denmark
What is Malware?

A compound word, combining the words malicious and software. Malware is sort of an umbrella term covering many more specific terms that go into the behaviour of the malicious software. Anything from adware (injects extra ads to earn money), vira (self replicating program that injects its own code into other components), ransomware (encrypts user data and demands a ransom to decrypt it), key loggers and so forth. Some are more or less feasible on different platforms. iOS is generally really quite safe, and whilst there certainly are ways of exploiting iOS, I wouldn't really worry about it if I were you. At most reboot if you're scared of anything. The exploits that jailbreaking use and such, which could theoretically be used for developing certain malicious software, does not persist a reboot (generally speaking), because it's only injected into temporary data layers, and not written to permanent storage. You could also clear Safari data if you want to be extra on the safe side, but I find it very unlikely that anything gets persistence on the system for you. Two and a half years ago I did a whole project on iOS security. As with anything in computing, nothing is unbreakable. But you're not vulnerable enough that you need to be concerned unless you're the prime minister of a country or something that there's a target on your back ;).
 

arn

macrumors god
Staff member
Apr 9, 2001
16,362
5,795
That statement is no longer true.
Yes, while very uncommon, it's now possible for a nefarious website to infect an iPhone running any version of iOS. The good ole days are gone. To believe you're immune from malware just cuz it's an iPhone is foolish.

I don’t believe this true - on modern iOS versions. Link to evidence or article describing this?
 

casperes1996

macrumors 604
Jan 26, 2014
7,392
5,463
Horsens, Denmark
How do check to make sure there are no key loggers or spyware on my phone

You can't really check per se. Well made malware is undetectable. Reboot, stay updated with iOS, and you're good. Apple also regularly updates their database of malware definitions, often if possible silently, which will prevent known malware of any kind running on the devices.
 

m0sher

macrumors 6502a
Mar 4, 2018
815
783

If your worried, MalwareBytes will give you web protection.

Includes call protection and text filtering.

Free AD blocking is what I originally downloaded it for, then got the full program.

The ad blocking is so helpful especially with Google Chrome. On Safari I don’t even realize there’s ads running even on popular websites that push them.
 

casperes1996

macrumors 604
Jan 26, 2014
7,392
5,463
Horsens, Denmark
Here you go...


From a technical perspective this article is poorly written, even though it's from a reputable source. I don't dispute the legitimacy of the claims, but it's written with hyperbole and scaremongering to an unnecessary degree, as well as a severe lack of technical explanation and understanding, just the way the heap is described for instance. Also, nothing in here explicitly makes any of this out to be a virus. Though it definitely sounds like they use the BootROM exploit newer jailbreaks also take advantage of. As mentioned both previously by me and the article, it does not persist a reboot. It also doesn't work every time, as it's based on a memory interaction side-channel vulnerability, which sometimes gets you access to unprotected memory, sometimes gives you a segfault crashing the code that's trying to exploit the device.

Nothing in tech is impenetrable. Users should still be aware. iOS is still very secure and if you stay updated and don't install untrusted developer profiles, you're not really at risk. Maybe if you live under a totalitarian government repressing its people, sure. But that's still not vira they use then.
 

Shirasaki

macrumors P6
May 16, 2015
15,534
10,796
How do check to make sure there are no key loggers or spyware on my phone
Because of the walled garden nature you have no way to check if there is any keylogger or spyware. But, believe it or not, Apple’s own remote assistant software can be repurposed as spyware because activating it does not require user input from device, a.k.a., no prompt. It can also record every single move on your screen.

So, yes, iPhone can get malware or maybe virus. And once infected, you have very limited options to remove them. The key is to be vigilant all the time and never believe “iOS is impenetrable”.
 

casperes1996

macrumors 604
Jan 26, 2014
7,392
5,463
Horsens, Denmark
Because of the walled garden nature you have no way to check if there is any keylogger or spyware. But, believe it or not, Apple’s own remote assistant software can be repurposed as spyware because activating it does not require user input from device, a.k.a., no prompt. It can also record every single move on your screen.

That is not "because" of the "walled garden". Well crafted malware can be impossible to detect on any platform
 

Shirasaki

macrumors P6
May 16, 2015
15,534
10,796
That is not "because" of the "walled garden". Well crafted malware can be impossible to detect on any platform
True. What I am talking about is possible methods an end user can do to find and remove the malware without erasing all data or doing something similar. Windows is fairly open and I can install various tools to find and remove the malware if I need to. On iOS, I don’t have such options.
 

casperes1996

macrumors 604
Jan 26, 2014
7,392
5,463
Horsens, Denmark
True. What I am talking about is possible methods an end user can do to find and remove the malware without erasing all data or doing something similar. Windows is fairly open and I can install various tools to find and remove the malware if I need to. On iOS, I don’t have such options.

Right. Sort of. Apple regularly updates their own XProtect definitions. This doesn't even always require an update, and Apple's platforms will automatically carry out any functionality offered by other anti-malware programs on other platforms for clearing out any malware found by XProtect. You may not have direct user input on the case, but that doesn't necessarily mean that the security isn't there in the same way. Besides, malwareBytes, Norton, AVG, McAfee, etc. don't find everything, and also have false positives. Ultimately, isn't it better that the XProtect system is native to the OS and entirely transparrent to the user? Most people don't even know what XProtect is, and no need to interact with it. Yet it protects you from defined malware same as these other programs do. Honestly I trust an iOS device to be clean of malware more than I do a Windows PC with McAfee or any of the others. If none of the anti-malware programs on Windows or whatever can find the malware, you can't do anything either until they update their definitions. Your situation isn't much different with XProtect on iOS, except for awareness if it ever does detect something.
 

ThatiPhoneKid

macrumors 6502a
Original poster
Aug 15, 2017
984
665
I went on a website today and it redirected me to an unknown Russian website, I quickly exited it but I’m worried this may have infected my iPhone? As I exited it before it fully loaded should it be ok?
 

now i see it

macrumors G4
Jan 2, 2002
10,585
22,082
There aren't any [known] persistent malware viri in the wild that can permanently infect iOS when just visiting a website. But there have been websites that DID infect iPhones with spyware just by visiting them - but the malware wasn't persistent and just by restarting the phone got rid of it.

When in doubt or paranoid, restart the iPhone. I try to do it once a day anyway just to keep it running smoothly.
 

C DM

macrumors Sandy Bridge
Oct 17, 2011
51,390
19,458
I went on a website today and it redirected me to an unknown Russian website, I quickly exited it but I’m worried this may have infected my iPhone? As I exited it before it fully loaded should it be ok?
Seems like the same answers provided before (earlier in the thread) in relation to this kind of thing still apply.
 

Plutonius

macrumors G3
Feb 22, 2003
9,018
8,379
New Hampshire, USA
I was on my iPhone today and pressed on a link for a recipe, then it took me to a shady looking website and I imminently exited... I was wondering if my iPhone can get malware, spyware, viruses or keyloggers?

My phone is not jail broken

Thanks

If you let a sick person use it, you could certainly get a virus from it.
 
  • Haha
Reactions: brgjoe
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.