With a hundred million end users, the notion of a widespread attack on Apple iOS devices is tempting to any criminal. The dream (or nightmare) of an attacker somehow targeting potentially millions of always-on, always-connected iOS devices using a large-scale automated attack is quite disconcerting. You might be surprised to know that not only is this possible, but that the threat is also much more serious than that; a skilled virus writer could harvest sensitive financial information, steal account credentials, or other sensitive data from nearly any application running on the device, regardless of what bank, credit card manager, or photo vault you use, and regardless of what storage encryption or passcodes the end user may use on the device. Surprisingly, the basic design of many runtime environments, including iOS, allow for such an effective generalized attack, and this article will demonstrate just how an attacker might go after such a tempting target.
Read more on the viaForensics website.
