iPhone Users Face Hacking RISK

iPhone Users Face Hacking Risk because Of Major Security Issue. Developers are able to preview their apps on the App Store using the TestFlight program where Apple has a lenient approach towards apps that are published for testing. And hackers have reportedly realised the ability to push spyware through third-party keyboards that you can use on iPhones.

Apple has long touted the privacy and security of its platforms, particularly iOS, the operating system used in iPhones. However, a recent discovery by UK-based cybersecurity firm Certo Software raises concerns about a potential loophole that could allow hackers to exploit iPhone users without raising any alarms.

Certo's research found that Apple's TestFlight program, which allows developers to distribute pre-release versions of their apps for beta testing, has lax security policies. This laxity could allow malicious actors to distribute apps disguised as legitimate ones, enabling them to spy on iPhone users through third-party keyboards.

The situation related to these spying activities has to be a concern for Apple as many people are even using the modus operandi to sell their services to people who want someone to be monitored on their iPhones. The firm mentions that such nefarious services are available for as low as $30 (Rs 2450 approx.) which gets them access to anyone's iPhone covertly.

The vulnerability lies in the way TestFlight apps are installed. Unlike apps downloaded from the App Store, which undergo a rigorous review process by Apple, TestFlight apps bypass this process. This means that malicious apps can be distributed to a wider audience without being detected.

Once a malicious TestFlight app is installed, it can request permission to access the user's keyboard. If granted, the app can then track everything the user types, including passwords, credit card information, and other sensitive data. This data can then be sent back to the hackers without the user's knowledge.

It's important to note that Apple has yet to officially acknowledge this vulnerability. However, the research by Certo Software raises serious concerns about the potential for hackers to exploit Apple's TestFlight program.

S Mohini Ratna, Editor, VARINDIA