New iPhone spyware can steal passwords and photos – Fox News

Security researchers have uncovered a new iPhone spyware strain that can infiltrate devices running certain iOS versions to extract user passwords, personal photos, and contact lists without requiring App Store distribution. By leveraging undisclosed vulnerabilities in WebKit and sideloading techniques, the malware executes undetected, sending stolen data to remote command-and-control servers. iPhone owners who have not updated to the latest iOS security patches are most at risk.

The spyware typically arrives via a malicious link sent by SMS or email, tricking targets into granting enterprise app permissions. Once installed, it gains access to key system APIs, allowing it to capture credentials typed into Safari or stored in the iCloud Keychain, grab images from the Photos library, and log location information. The operation can persist through device reboots until the enterprise certificate is revoked.

This development raises serious concerns about mobile security on the iOS platform, long regarded as more impervious to spyware than its counterparts. The ability to harvest passwords directly from iCloud Keychain undermines core features like Face ID and App Privacy Reports. Users could find their online accounts hijacked, digital identities compromised, and private images exposed in the event of a breach.

Advertisement

Apple addressed some of these attack vectors in recent iOS updates by tightening enterprise provisioning controls and enhancing runtime memory protections. However, the spyware appears to exploit gaps that remain. Unlike zero-click exploits which require no user interaction, this campaign relies on social engineering—making awareness and user caution critical first lines of defense against credential-stealing threats.

At present, there is no evidence that developers or enterprises are intentionally distributing this malware. Instead, threat actors are impersonating legitimate services to trick individual users. Anyone using an iPhone should verify that they are running the latest public version of iOS by visiting Settings > General > Software Update. Disabling app installs from untrusted enterprise sources and scrutinizing unexpected links in messages can significantly reduce risk.

Apple has publicly acknowledged that it continues to investigate emerging threats and encourages users to report suspicious activity via its built-in Feedback Assistant or support channels. While iOS 17.4 and later include enhancements to detect and block known spyware certificates, experts suggest routine vigilance and regular backups remain vital for restoring compromised devices.

As mobile spyware evolves, iPhone security will hinge on a combination of operating system hardening and informed user behavior. Researchers anticipate that future iOS releases will extend runtime integrity checks to more subsystems, further constraining unauthorized app capabilities. In the meantime, users should remain cautious of unsolicited links and keep devices up to date to stay ahead of sophisticated credential-stealing campaigns.

FAQs

Question

How does the spyware infect iPhones?

It arrives via malicious links that prompt users to install enterprise-signed apps without App Store oversight.

Question

Which iOS versions are vulnerable?

Devices running versions of iOS prior to the latest public security update are at higher risk until patched by Apple.

Question

How can I check if my iPhone is safe?

Ensure you have installed all available updates under Settings > General > Software Update and avoid installing untrusted profiles.

Question

What should I do if I suspect infection?

Remove any unfamiliar enterprise apps, revoke profiles in Settings > General > VPN & Device Management, then update your device and change key passwords.

Verdict

The emergence of this iPhone spyware highlights that even Apple’s tightly controlled ecosystem is not immune to sophisticated threats. Users who delay iOS updates or engage with unverified links risk exposing passwords and private media. Apple’s ongoing security enhancements aim to close these gaps, but individual vigilance is equally crucial. Expect future iOS revisions to bolster enterprise provisioning safeguards, yet the onus remains on users to install updates promptly and restrict app installs to trusted sources.