iOS security hole reportedly exposes your screen input

snoopy · Feb 26, 2014

A malicious monitoring app could log the keystrokes and touch input on your iOS device, say security researchers.

Every tap, touch, and press you make on your iPhone and iPad could be monitored and captured remotely due to an iOS security flaw. At least, that's the claim from security firm FireEye.

In a blog posted Monday, FireEye researchers said they conducted a test on non-jailbroken iOS 7.0.x devices in which they installed a "monitoring" app. This app was able to record all touch and press events in the background, including screen touches, home button presses, volume button presses, and TouchID presses. Based on its findings, the team concluded that an attacker could use such an app to remotely obtain keystrokes and screen touches on an iOS device, thereby reconstructing "every character the victim inputs."

The flaw reportedly lies in the way background apps run on an iPhone or iPad as those apps can detect all keystrokes and touch inputs made on the device. Disabling the Background App Refresh setting can prevent the background monitoring, though a malicious app disguised as a music program could still conduct such monitoring.

And though the researchers used a device running iOS 7.0.4, they said the same vulnerability exists in iOS versions 7.0.5, 7.0.6 and 6.1.x.
Click to expand...

Read more here: http://news.cnet.com/8301-1009_3-57619480-83/ios-security-hole-reportedly-exposes-your-screen-input/

Log in or Sign up

iOS security hole reportedly exposes your screen input

snoopy Registered Members

Share This Page

Log in or Sign up

iOS security hole reportedly exposes your screen input

snoopy Registered Members

Share This Page

Useful Searches