Is it possible to accidentally download something outside of the App Store? I read something about side loading and wondering if this or other technique could be done by accidentally clicking on a web link or purposely clicking on a link you didn’t know would infect your phone. I have this phobia of malware and am wondering if there is any way whatsoever malware could end up on a non jail broken iPhone.
expectthebest wrote:
Thank you. What I’ve learned is iPhone can get malware such as adware and the like from clicking on a link. However it is highly unlikely even considering the file that somehow showed up (not sure if it was actually for scanning or not) If I’m off point please correct me.
as a side note, my biggest fear is having some type of malware that would go through the home wifi and infect other computers or phones in the house. Hopefully this is equally rare
You’re clearly expecting to be the target of immensely expensive espionage-grade exploit tooling or similar, and will therefore want security advice tailored to your particular risks and requirements.
This will best be a systemic security review, will probably involve moving to security tokens and away from the iMessage/SMS two-factor for your account security for Apple ID and otherwise, and you’ll probably also no longer have any of the connected equipment that is concerning you here.
Pragmatically, exceedingly few people will be targeted, and will need to go through that effort and expense. This based on available published evidence. Keeping the apps and devices current, and following good practices around unique and robust passwords, and two-factor authentication, and related recommendations, is enough. Life is not espionage, and not Hollywood scripts, and not what you are envisioning.
Now if you are famous, or with access to classified or sensitive or financial data, a political dissident, investigative journalist, or otherwise of interest to or an annoyance to some exceedingly well-funded adversaries, the calculation here can shift.
expectthebest wrote:
Thank you. What I’ve learned is iPhone can get malware such as adware and the like from clicking on a link. However it is highly unlikely even considering the file that somehow showed up (not sure if it was actually for scanning or not) If I’m off point please correct me.
as a side note, my biggest fear is having some type of malware that would go through the home wifi and infect other computers or phones in the house. Hopefully this is equally rare
You’re clearly expecting to be the target of immensely expensive espionage-grade exploit tooling or similar, and will therefore want security advice tailored to your particular risks and requirements.
This will best be a systemic security review, will probably involve moving to security tokens and away from the iMessage/SMS two-factor for your account security for Apple ID and otherwise, and you’ll probably also no longer have any of the connected equipment that is concerning you here.
Pragmatically, exceedingly few people will be targeted, and will need to go through that effort and expense. This based on available published evidence. Keeping the apps and devices current, and following good practices around unique and robust passwords, and two-factor authentication, and related recommendations, is enough. Life is not espionage, and not Hollywood scripts, and not what you are envisioning.
Now if you are famous, or with access to classified or sensitive or financial data, a political dissident, investigative journalist, or otherwise of interest to or an annoyance to some exceedingly well-funded adversaries, the calculation here can shift.
expectthebest wrote:
Tks. I read that you can side lload without jail breaking which lead to my question on if it could be done accidentally or unknowingly without some additional step other than just clicking on stuff. But perhaps this is not correct.
Side-loading involves deliberate effort by someone with physical and passcode access to the device. it is not accidental. It is not happenstance. Once the necessary steps are taken to deliberately side-load an app, what transpires is whatever the app developer intended. What that result might be?
expectthebest wrote:
You know it’s interesting. I’ve had several chats with the support folks at apple. Some say iPhone cannot get malware and others say you can, especially when I bring up this file issue.
You’re shifting the question again.
iPhone can get malware.
Malware is comparatively rare and targeted based on available evidence, but can happen.
Fake malware scans and phishing snd related target the user, not the iPhone.
And again, if a website could scan a client device, there would be no reason to show a fake scan or the rest of the usual schtick. Simply upload all the data from the device to the website, and profit. Again, a malware scan is an immensely intrusive act.
Absolute security is unattainable, unaffordable, and unusable. And if somebody with the budget for trouble considers you worth attacking, you’re probably going to have a bad day even if your hardware and software don’t get breached. Obligatory: https://xkcd.com/538/
expectthebest wrote:
Thank you. What are the chances a web site could have downloaded this file onto my phone?
You can download certain types of files from websites, things like pdfs. But they will not hurt your phone. If you don't know what the item in Files is and don't think you need it, you can just delete it.
No. It’s not possible unless you jailbreak your device.
Thank you. What I’ve learned is iPhone can get malware such as adware and the like from clicking on a link. However it is highly unlikely. If I’m off point please correct me.
Tks. I read that you can side lload without jail breaking which lead to my question on if it could be done accidentally or unknowingly without some additional step other than just clicking on stuff. But perhaps this is not correct.
Thank you. I was actually just looking in my files app and there was a blank file in the folder from the exact day that I was thinking I accidentally clicked on something that might be nefarious. I think it was called “scan” or “scan”, something like that. I deleted it and restarted my phone. But is this coincidence? Anything to worry about?
expectthebest wrote:
You know it’s interesting. I’ve had several chats with the support folks at apple. Some say iPhone cannot get malware and others say you can, especially when I bring up this file issue.
I've given you the best information I have. MrHoffman and muguy have done the same. You now have to decide if you accept the information or not. Asking us the same questions repeatedly is not going to get a different answer.
Best of luck.
expectthebest wrote:
What I’ve learned is iPhone can get malware such as adware and the like from clicking on a link.
If that's what you learned, I think perhaps you need to go back and re-read the answers.
Thank you. What I’ve learned is iPhone can get malware such as adware and the like from clicking on a link. However it is highly unlikely even considering the file that somehow showed up (not sure if it was actually for scanning or not) If I’m off point please correct me.
as a side note, my biggest fear is having some type of malware that would go through the home wifi and infect other computers or phones in the house. Hopefully this is equally rare
expectthebest wrote:
Does the fact that I have an iPhone 8 change anything?
Again, you have told us that you are a target for immensely expensive espionage-grade exploit tooling, and which means you will want and need security advice tailored to your particular risks and requirements. That advice will undoubtedly include discussions of your particular situation, and the most appropriate hardware for your particular risks and budget.
No, I don’t think I am the farther of an expensive espionage tool. But I think I get your drift. I asked about the iPhone 8 because I read it wasn’t very secure due to lack of updates along with the 7.
expectthebest wrote:
No, I don’t think I am the farther of an expensive espionage tool. But I think I get your drift. I asked about the iPhone 8 because I read it wasn’t very secure due to lack of updates along with the 7.
That you expect to be the target of expensive espionage-grade tooling has been your concern this whole thread, starting with “Possible to Accidentally Download Unapproved Software?“ and right through to asking about the relative security of iPhone 8 hardware.
Or maybe you’re really not a target for expensive exploit tooling, and would simply prefer somebody here provide you with a comforting falsehood (¿un mentira blanca?), such as “iPhone is immune to malware, and an iPhone 8 is completely secure”?
Thank you. What are the chances a web site could have downloaded this file onto my phone?
Possible to Accidentally Download Unapproved Software?
