clicked phishing link on iphone (fell for a genuine looking facebook authentication link)

Okay I really should have known better. I received a pretty genuine looking facebook authentication link in my email on my iphone 8 (running up to date ios 16.6.1). It linked to the facebook.com browser through safari and I did actually try and log in with my saved password details on my phone (which it turns out I had changed some time ago which has probably saved me a lot of grief). That failed so I thought yep that password saved is old. I'll just jump in my app which was active (I didn't go through any link I manually went to my app) at which point I realised through looking for password changes and things that they hadn't sent such an email and that I had been phished. At which point panic and dread started to sink in. I didn't use the change password direct link nor did I use the code they sent in any form. I did some more research and it took an hour or two before I could get home to all my passwords and start going onto my laptop and changing them all and logging out of all visible devices from my meta accounts and starting again. As we have norton 360 we added that hoping to make sure that my phone was safe before i started logging into secure apps like my bank etc with are linked to my finger print ID. I am hoping I can get some guidance on whether I should reset my phone before trying to log back into any of my secure apps like the bank and government ones and whether I am going to need to change pins and IDs linked to that fingerprint as well or whether just changing all the passwords from my PC is enough and then logging back in? Norton is now running BUT from what we've read it wont have scanned my actual phone to know if any malware did get on there at all? More importantly, do I need to change the password on my AppleID? I've done it before and had all sorts of chaos ensue till it all sync'ed so am hoping to avoid that if i can but will change that too if prudent. Finally. Microsoft authenticator app on ios, will that still be secure? meanwhile I will get back to changing passwords for every app linked account I had on my phone......

iPhone 8, iOS 16

Posted on Sep 12, 2023 9:05 PM

Reply

Similar questions

3 replies

Sep 12, 2023 10:53 PM in response to teensandpets

iOS / iPadOS devices cannot be infected** with Viruses / Malware / Spyware unless you have intentionally downloaded spurious software or unauthorized apps directly from the internet and installed them on your device or/and have Jailbroken



**The primary reason for this is Sandboxing. All third-party apps are “sandboxed”, so they are restricted from accessing files stored by other apps or from making changes to the device. Sandboxing is designed to prevent apps from gathering or modifying information stored by other apps.


Security of runtime process in iOS and iPadOS - Apple Support



The sandbox on an iPhone is a security feature that creates a restricted environment for each app to run in isolation from other apps and the operating system. It is a core component of iOS's security architecture and plays a crucial role in making iPhones more secure.


In layman's terms:


The sandbox works by enforcing strict controls and limitations on app behavior, ensuring that each app has access only to the resources it needs to function properly. Here are some key aspects of the sandbox that contribute to iPhone security:


  1. Isolation: Each app on an iPhone operates within its own sandboxed environment, which means it has no direct access to the files, processes, or memory of other apps. This isolation prevents apps from interfering with one another, protecting user data and maintaining system stability.
  2. Restricted Resource Access: The sandbox restricts an app's access to sensitive resources such as contacts, photos, location data, and system settings. Apps must explicitly request user permission to access these resources, and users have control over granting or denying access. This helps prevent unauthorized data access and ensures user privacy.
  3. Limited File System Access: Apps can only access their own containerized storage area and specific system-provided directories. They cannot modify files outside of their designated areas or interfere with the operating system files. This prevents apps from tampering with critical system components.
  4. Code Execution Controls: The sandbox enforces restrictions on code execution, preventing apps from running arbitrary code or injecting malicious code into other apps or the system. It helps ensure that apps only execute approved code from their own sandboxed environment.
  5. App Review Process: Before an app is allowed on the App Store, it goes through a rigorous review process conducted by Apple. This review examines the app's functionality, security, and adherence to guidelines. It helps detect and remove malicious or poorly designed apps, minimizing the risk to users.


The combination of these sandboxing mechanisms helps create a secure environment on iPhones, protecting user data, maintaining system integrity, and preventing unauthorized access or interference between apps.



Jan 31, 2024 6:35 AM in response to SravanKrA

Hi SravanKra,

I have been searching for an answer to my situation for sometime and have run across many of your replies to others. I think you've convinced me that my phone is safe but since this thread is still active, wanted to pose the question -


I received a scam email a couple days ago and I long-pressed the link within it, as the preview window opened it dawned on me that it was a scam.


I've never clicked a malicious / scam link before so I'm some what at a loss of the risk imposed.


Furthermore, I hadn't finished installing the latest update, 17.3. (it is now, and was on whatever the previous update was, 17.2.1(?))


I appreciate the helpful info you've already dispensed and should you reply to this query I would greatly enjoy your feedback, thank you

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

clicked phishing link on iphone (fell for a genuine looking facebook authentication link)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.