Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Are there examples of malware that affects jailbroken iOS devices that doesn't require installation of shady packages (e.g. something that can compromise a device just by opening a PDF or visiting a site)?

share|improve this question
    
It doesn't match your criteria, but my most memorable vulnerability involves installing OpenSSH / SSHd and doing nothing else. Many people use OpenSSH very legitimately for on-device file management. Legitimately meaning the package is legitimate (and has long since been patched regarding this vulnerability). –  Jason Salaz Feb 23 '12 at 6:21
    
Oddly it was a PDF vulnerability that allowed a jailbreak in iOS 4.3.x. Then, a jailbroken iOS device that was patched prevent further PDF exploits. –  osx86x Feb 23 '12 at 10:30
    
Do you think you could accept an answer? It's been a few months since you asked. –  Andrew Larsson Jun 12 '12 at 18:05
    
If there's a problem you're trying to solve - feel free to edit those details in to help the most people put answers into context –  bmike Oct 15 '13 at 15:28
    
Do you consider this question to be unanswered? If so, could you explain how I could make my contribution better? –  Andrew Larsson Oct 18 '13 at 19:24
add comment

2 Answers

If you leave your device unattended for just a couple of minutes a trojan horse can be quickly installed. It takes roughly 1-2 minutes to install it on a jailbroken device.

share|improve this answer
1  
Good thing I lock my device compulsively. In all seriousness though, unrestricted physical access is where most security ends, jailbreak or no. –  Julio R. Mar 26 '12 at 20:20
2  
@HerrKaleun Prove it. Show me anything that proves it. –  Andrew Larsson Mar 27 '12 at 0:26
1  
In all my couple years of jailbreaking I have never seen a trojan. Permit me to say: "pics, or it didn't happen". –  sudo rm -rf Mar 27 '12 at 2:48
1  
That's a legitimate application with legitimate uses. Parents could install it to their child's iPhone to make sure they're safe. You could use a lot of real applications for ill. That's not malware or a trojan. That's spyware at the least, and who leaves their phone unattended anyways? That's like saying someone could steal your car if you left your keys laying around. –  Andrew Larsson Mar 27 '12 at 15:23
1  
@HerrKaleun You could be with your friends and they could type sudo rm -R into your terminal. There's a difference between an intentionally installed package and some remotely installed malware. You can't get this spyware installed by just going to a website. The PDF exploit I referred to needed no user consent. User consent is the key. Something someone does on the device when they physically have access to it is different than getting sent/clicking a link that gives you a virus without you knowing it. –  Andrew Larsson Mar 28 '12 at 21:43
show 9 more comments

This post does not cite any references or sources. Please help improve this post by adding citations to reliable sources. Unsourced material may be challenged and removed.

I hate to say it, but in all my years of JailBreaking I have yet to see any type of malware have any real impact on the iOS community. Sure there was the infamous SSH vulnerability, but that was patched rather quick. That's the beauty of JailBreaking; we don't have to wait for Apple to release a fix. Most people fear that JailBreaking is insecure and puts your device at risk. That's far from the truth. My favorite example is the JailBreakMe.com PDF exploit for iOS 4.3.3. At the same time they released the exploit, they pushed a patch to Cydia. As soon as you JailBroke, you were advised to install the patch, so that your device could not be further compromised. It took Apple a lot longer to implement and roll out their fix. In that situation, it was better to JailBreak than to not, because unless you had the patch, someone with bad intentions could have abused the exploit and done anything they wished with your device. Sure, you can be careless and install some malicious software, but most of the time it's the user's fault, because you always should be careful with what you do in a limited-regulation environment. As a final answer to your question, there were a few PDF exploits that were triggered merely be visiting a website (JailBreakMe.com), but those vulnerabilities were never used for evil.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.