Suspected spyware or remote access on iPhone

I feel like my girlfriend may have put some sort of spyware or malware on my device or maybe even some sort of remote desktop. How do I find software or program program that was not installed by Apple?


[Re-Titled by Moderator]



iPhone 13, iOS 18

Posted on Oct 20, 2024 2:11 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 20, 2024 2:38 PM

Unless you are of interest to an exceedingly well-funded adversary, what you might imagine is exceedingly unlikely.


Yes, malware exists for iPhone and iPad, it’s just really expensive and its use targeted, based on what information is available. Full-remote exploits are worth roughly one to two million dollars, each.


What might have happened is a compromise to your Apple Account and/or to your device passcode.


Start here: Use Safety Check on iPhone to stop sharing and secure your account - Apple Support


The rest of that document might interest you here, as well.


And then here: If you think your Apple Account has been compromised - Apple Support


If your devices have been unsecured and out of your control, perform a factory reset and restore just the data and accounts and apps you want.


How to factory reset your iPhone, iPad, or iPod touch - Apple Support


If you suspect a breach, change all of your passwords, and passcodes, including those passwords for your email accounts and for other password-reset paths, social media, and otherwise. Enable two-factor authentication, as well.


There are other means to track people entirely unrelated to Apple gear, of course.

6 replies
Question marked as Top-ranking reply

Oct 20, 2024 2:38 PM in response to HackingHowCanIknow

Unless you are of interest to an exceedingly well-funded adversary, what you might imagine is exceedingly unlikely.


Yes, malware exists for iPhone and iPad, it’s just really expensive and its use targeted, based on what information is available. Full-remote exploits are worth roughly one to two million dollars, each.


What might have happened is a compromise to your Apple Account and/or to your device passcode.


Start here: Use Safety Check on iPhone to stop sharing and secure your account - Apple Support


The rest of that document might interest you here, as well.


And then here: If you think your Apple Account has been compromised - Apple Support


If your devices have been unsecured and out of your control, perform a factory reset and restore just the data and accounts and apps you want.


How to factory reset your iPhone, iPad, or iPod touch - Apple Support


If you suspect a breach, change all of your passwords, and passcodes, including those passwords for your email accounts and for other password-reset paths, social media, and otherwise. Enable two-factor authentication, as well.


There are other means to track people entirely unrelated to Apple gear, of course.

Oct 31, 2024 8:21 AM in response to Marksy1717

Marksy1717 wrote:

Hey,
im in similar position. I think mspy is the name of one of the apps that could be affecting me. How can I find this? Yes someone did have access to my phone, and I won’t make that error again.


That app can be deleted.


What else might have been exposed, not so much.


Definitely Safety Check: Safety Check for an iPhone with iOS 16 or later - Apple Support


I’d likely reload the device without restoring a backup, and would change all of the passwords, and would verify your trusted paths and your list of trusted devices as they could get a verification code for their devices (given your password).


The scope of the problem also depends on whether they got access to your password store, via passcode or via biometrics. If they didn’t, then the damage is probably somewhat more constrained, and loading that app can use their creds. If they got access to your credentials stores and anything past two-factor (as they temporarily had a trusted device, maybe access to your passwords), then your security is headed for an overhaul.


Then: Better Securing Your Data, and Apple Account - Apple Community

Oct 31, 2024 7:57 AM in response to Marksy1717

mSpy is an app just like any other app that can be installed on your phone and deleted in the same way. Go to your App Library by swiping it all the way to the left and search for it.


On iOS 18, apps can also be hidden with the appropriate device credentials, and you can unhide them also using the steps provided here:

Lock or hide an app on iPhone - Apple Support


You can also check your Purchase History. Even if an app is hidden, it will still show in your Purchase History.

View your purchase history for the App Store and other Apple media services - Apple Support

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Suspected spyware or remote access on iPhone

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.