I believe I have spyware on my iPhone 14 Pro

I believe I have spyware on my iPhone 14 Pro. I have reset the phone and a week later notice the orange light appearing when all apps are closed. Can someone help me.


[Re-Titled by Moderator]

Posted on Aug 12, 2024 3:47 PM

Reply
Question marked as Top-ranking reply

Posted on Aug 12, 2024 4:39 PM

If you are referring to the Unknown process running as PID 0, that is the process identification of the iOS kernel; the process that initiated everything else now running. What would be called kernel_task on macOS.


The highlighted PID 0 process is not evidence of an exploit, or of spyware, or of anything other than a perfectly normal iPhone.


To see what app is (or was last) using the 🟠 microphone, open Control Center, and look: Access Control Center on your iPhone - Apple Support


While there are espionage tools around that can cause problems (and that are effectively self-contained jailbreaks of various sorts), the particular exploits involved in those tools are worth millions of dollars each, and available evidence indicates the available tooling is targeted, and is not widely used.


There are certainly folks that are targeted with these tools, including investigative journalists, political dissidents, members of militaries involved in conflicts, senior in private or government, with access to sensitive or classified data, or those with access to immense wealth, for instance.


If you want to know more about this topic:


Citizen Lab https://www.youtube.com/watch?v=OZZbh67c6qc


Personal Safety Guide: Personal Safety User Guide - Apple Support


Run Safety Check described there, and also maybe Lockdown mode.


What Apple writes about this tooling: About Apple threat notifications and protecting against mercenary spyware - Apple Support


Most of the commodity spyware or stalkerware around works via backups or iCloud access, so ensure your Apple ID password is not compromised and has not been reused, and your passcode is also not compromised, and same for your backups.


The Personal Safety Guide (above) has information about checking the Apple apps that might not be at the settings most appropriate for your current situation.


Some resources for those freshly encountering or concerned about stalkerware, domestic violence, and other related topics:



4 replies
Question marked as Top-ranking reply

Aug 12, 2024 4:39 PM in response to Ash-R053

If you are referring to the Unknown process running as PID 0, that is the process identification of the iOS kernel; the process that initiated everything else now running. What would be called kernel_task on macOS.


The highlighted PID 0 process is not evidence of an exploit, or of spyware, or of anything other than a perfectly normal iPhone.


To see what app is (or was last) using the 🟠 microphone, open Control Center, and look: Access Control Center on your iPhone - Apple Support


While there are espionage tools around that can cause problems (and that are effectively self-contained jailbreaks of various sorts), the particular exploits involved in those tools are worth millions of dollars each, and available evidence indicates the available tooling is targeted, and is not widely used.


There are certainly folks that are targeted with these tools, including investigative journalists, political dissidents, members of militaries involved in conflicts, senior in private or government, with access to sensitive or classified data, or those with access to immense wealth, for instance.


If you want to know more about this topic:


Citizen Lab https://www.youtube.com/watch?v=OZZbh67c6qc


Personal Safety Guide: Personal Safety User Guide - Apple Support


Run Safety Check described there, and also maybe Lockdown mode.


What Apple writes about this tooling: About Apple threat notifications and protecting against mercenary spyware - Apple Support


Most of the commodity spyware or stalkerware around works via backups or iCloud access, so ensure your Apple ID password is not compromised and has not been reused, and your passcode is also not compromised, and same for your backups.


The Personal Safety Guide (above) has information about checking the Apple apps that might not be at the settings most appropriate for your current situation.


Some resources for those freshly encountering or concerned about stalkerware, domestic violence, and other related topics:



Aug 12, 2024 4:05 PM in response to Ash-R053

Ash-R053 wrote:

I believe I have spyware on my iPhone 14 Pro. I have reset the phone and a week later notice the orange light appearing when all apps are closed. Can someone help me.
https://discussions.apple.com/content/attachment/4c8e957d-9f76-4812-a9f1-a653a481e7f2

[Re-Titled by Moderator]

There are no virus/malware/spyware/hack for a non jailbroken device.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I believe I have spyware on my iPhone 14 Pro

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.