HT6584: iOS: When you install custom enterprise apps

Learn about iOS: When you install custom enterprise apps
Butterfly102938

Q: What if I downkoaded an app form a website, clicked trust, but then got scared and deleted the app, can they access anything?

Hela please

iPad Air, iOS 8

Posted on Jan 20, 2015 7:52 PM

Close

Q: What if I downkoaded an app form a website, clicked trust, but then got scared and deleted the app, can they access anything?

  • All replies
  • Helpful answers

Page 1 Next
  • by Amilixkan,Helpful

    Amilixkan Amilixkan Jan 20, 2015 7:53 PM in response to Butterfly102938
    Level 3 (550 points)
    Jan 20, 2015 7:53 PM in response to Butterfly102938

    If it was malicious perhaps. What app was?

  • by ChitlinsCC,Helpful

    ChitlinsCC ChitlinsCC Jan 21, 2015 6:40 AM in response to Butterfly102938
    Level 5 (7,778 points)
    Notebooks
    Jan 21, 2015 6:40 AM in response to Butterfly102938

    Butterfly

     

    You were downloading an App, but as you were surprised by the novelty of the Alert Message (having downloaded Apps before), you were likely challenged about the Website from which you were downloading. What website was it?

     

    Just because you were challenged does not mean - necessarily - that anything malicious happened.

     

    Here's a brief explanation of Trusted Root Certificates and the list maintained by iOS...

     

    iOS 8: List of available trusted root certificates

    The iOS Trust Store contains trusted root certificates that are preinstalled with iOS.

     

    About trust and certificates

    the links immediately following jump to the target section in the source document iOS 8: List of available trusted root certificates - Apple Support

     

    The iOS 8 Trust Store contains three categories of certificates:

     

    Trusted root certificates are used to establish a chain of trust that's used to verify other certificates signed by the trusted roots, for example to establish a secure connection to a web server. When IT administrators create Configuration Profiles for iPhone, iPad, or iPod touch, they don't need to include these trusted root certificates.

     

    Always Ask certificates are untrusted but not blocked. When one of these certificates is used, you'll be prompted to choose whether or not to trust it.

     

    Blocked certificates are believed to be compromised and will never be trusted.

     

    This article lists the certificate trust policies for iOS, and is updated when changes are made to the certificate list. You can find the version of the Trust Store installed on your iOS device by tapping Settings > General > About. Scroll down to the bottom of the list to see the Trust Store version. This article lists the certificates for iOS Trust Store version 2014081900, which is current for iOS 8 and later.

     

    The actual LIST follows in iOS 8: List of available trusted root certificates - Apple Support

     

    Again, the important questions are:

    ?? What Website & What App ??

  • by Butterfly102938,

    Butterfly102938 Butterfly102938 Jan 21, 2015 7:26 AM in response to Amilixkan
    Level 1 (0 points)
    Jan 21, 2015 7:26 AM in response to Amilixkan

    It was movie box, an app to watch movies free.

  • by Butterfly102938,

    Butterfly102938 Butterfly102938 Jan 21, 2015 7:26 AM in response to ChitlinsCC
    Level 1 (0 points)
    Jan 21, 2015 7:26 AM in response to ChitlinsCC

    Thanks for the help! It was pyger and the app was movie box

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Jan 21, 2015 8:04 AM in response to Butterfly102938
    Level 5 (7,778 points)
    Notebooks
    Jan 21, 2015 8:04 AM in response to Butterfly102938

    pyger.com

     

    resolves to ww2.pyger.com and this empty page

     

    The Movie Box (App)

    https://itunes.apple.com/us/app/the-movie-box/id887580814?mt=8

     

    Read what Meg_St._Clair has to say to the original poster's answer to a previous question - What happened to movie box?

  • by babowa,

    babowa babowa Jan 21, 2015 8:06 AM in response to Butterfly102938
    Level 7 (32,056 points)
    iPad
    Jan 21, 2015 8:06 AM in response to Butterfly102938

    Well, I would get rid of it - see the first result from my Google search here (and the remainder also mention jailbroken iDevices)::

     

    Screen Shot 2015-01-21 at 8.01.55 AM.png

     

    Any app or site that offers things for free while they cost money elsewhere can (and mostly does) include unwanted additions to your downloads such as malware or adware. So can we assume that you have a jailbroken iDevice? If so, we are not allowed to discuss this here and the hosts will most likely remove the entire thread.

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Jan 21, 2015 8:31 AM in response to Butterfly102938
    Level 5 (7,778 points)
    Notebooks
    Jan 21, 2015 8:31 AM in response to Butterfly102938

    The title of your question includes " ... then got scared and deleted the app, can they access anything? "

    Tell us HOW you deleted the App. Your unspoken fear is that something was installed that is unseen and malicious. Here is one of our own thomas_r.'s articles regarding the issue:

    http://www.thesafemac.com/major-ios-insecurity/

    *Hopefully he will see his name mentioned and " come a runnin' " - if not we'll track him down

     

    For all his articles on " ios+malware " - http://www.thesafemac.com/?s=ios+malware&submit=Search

  • by Butterfly102938,

    Butterfly102938 Butterfly102938 Jan 21, 2015 8:58 AM in response to babowa
    Level 1 (0 points)
    Jan 21, 2015 8:58 AM in response to babowa

    No, I don't have a jail broken device, you can download it without being jail broken

  • by Butterfly102938,

    Butterfly102938 Butterfly102938 Jan 21, 2015 9:00 AM in response to ChitlinsCC
    Level 1 (0 points)
    Jan 21, 2015 9:00 AM in response to ChitlinsCC

    I Just deleted the app like another app, clicking it and then clicking the x button, but then I did nothing else

  • by Butterfly102938,

    Butterfly102938 Butterfly102938 Jan 21, 2015 9:01 AM in response to ChitlinsCC
    Level 1 (0 points)
    Jan 21, 2015 9:01 AM in response to ChitlinsCC

    Thanks so much, but this is not the app

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Jan 21, 2015 9:18 AM in response to Butterfly102938
    Level 5 (7,778 points)
    Notebooks
    Jan 21, 2015 9:18 AM in response to Butterfly102938

    you said " Thanks for the help! It was pyger and the app was movie box " in response to the questions What Website? & What App?


    As I demonstrated " pyger -> pyger.com " goes nowhere (as does pyger.net - it is not even resolve-able)

     

    Google search for " movie box " results in the iTunes-AppStore link as its top hit -

     

    You'll have to be specific in your answers, as we seem to asking a lot of questions resulting from not enough precise info.

  • by babowa,

    babowa babowa Jan 21, 2015 9:19 AM in response to Butterfly102938
    Level 7 (32,056 points)
    iPad
    Jan 21, 2015 9:19 AM in response to Butterfly102938

    Butterfly102938 wrote:

     

    No, I don't have a jail broken device, you can download it without being jail broken

     

    That's good to hear, although it appears - as mentioned in the linked thread above - the only legal way to obtain an iOS app is to download it from the app store. So, who knows what you got and what it contained.

  • by thomas_r.,

    thomas_r. thomas_r. Jan 21, 2015 9:27 AM in response to Butterfly102938
    Level 7 (30,924 points)
    Mac OS X
    Jan 21, 2015 9:27 AM in response to Butterfly102938

    Butterfly102938 wrote:

     

    It was movie box, an app to watch movies free.

     

    First, that's a highly illegal and unethical thing to do. Commercial movies cannot be legally downloaded for free, and attempts to do so are invariably connected to attempts to scam you in some way, including by installing adware or malware. Streaming commercial videos should only be done by using a streaming service with a legal right to the video content in question. Examples would include iTunes, Netflix, Amazon Prime, Hulu, etc.

     

    Second, the only way to install Movie Box on an iPad is to either jailbreak it or use a hack to install it without jailbreaking, since it is not available in the App Store. Either way is bad, and exposes you to potential malware. It's unlikely that this event resulted in an infection on your iPad, but not impossible. To be safe, you would be wise to restore your iPad to factory settings, without restoring from a backup:

     

    Use iTunes to restore your iOS device to factory settings - Apple Support

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Jan 21, 2015 10:12 AM in response to Butterfly102938
    Level 5 (7,778 points)
    Notebooks
    Jan 21, 2015 10:12 AM in response to Butterfly102938

    I will leave this discussion as I consider thomas_r.'s answer expert, ethical and legally sound. (You were gonna get the Intellectual Property lecture after we made sure you were safe = as has been said, "whaddya you expect for free?" - should be trouble, in most every case)

Page 1 Next