Ipad Hacked - I watched somebody go into my contacts and browse around

I have a new generation Ipad.. (White 32Gig- 3G)... Was on ATT network at home.. Also had Network On.. I set it down for 1 minute to watch something on TV.. Saw the Ipad keyboard open.. Keys were being pressed. Then it went to my contacts and the hacker was browsing around.. So I had to shut it down right away. Got off the ATT network, shut down my router etc... Actually got my wife to come look as I wanted to make sure I wasn't seeing things...


Now I've gone ahead and erased the Ipad. Reset my home network and router. Turned off the broadcast of my SSID for my home netowrk.


I then called Cox to make sure all my Router settings were correct. giving me the best protection. While doing this I asked if he had ever heard of an Ipad being compromised. He said no.


I went into an Apple store as another one of my Ipads needed to be replaced. While I was there I asked 2 employees and the manager about Ipads being hacked into. They all said they have never heard of it.


As far as the apps on my Ipad.. They were all Apple Store apps.. The app that was on when this occurred was Subway Surfer.


Any comments would be appreciated.


Thanks

iPad (3rd gen) Wi-Fi + Cellular, iOS 6.0.2

Posted on Dec 29, 2012 1:13 PM

Reply
Question marked as Top-ranking reply

Posted on May 31, 2013 4:32 AM

There is no known way of remotely controlling the screen on an iPad that has not been jailbroken. Dirty or defective screens have been known to make this happen, which can look very deliberate sometimes.


Regarding the router, note that the encryption you're using on your network doesn't mean anything if you've got your router set to allow remote administration. This would allow anyone who brute-force cracks your password over the internet to change your router settings. Make sure to turn off remote administration in your router.

69 replies

May 31, 2013 7:46 AM in response to sergiotachini

There may be some iOS app that would allow you to remotely access the screen of that app, while that app was open. It's possible, but may or may not actually exist. However, iOS apps are not allowed much runtime in the background, and cannot install any kind of hooks to allow this sort of thing. So there's no way for someone to remotely control the screen like this in general.

Aug 7, 2013 7:26 PM in response to alekzandr

Did you ever find out anything about your remote indruder or any way to prevent it. I have a friend with an ipad and she aparently has had this exact problem several times now.... in fact the other day a notepad file full of important passwords was deleted..... she had gone off and left the ipad online and when she came back the file was gone. Also she had had passwords changed aparently done remotely.....


thanks

Aug 8, 2013 5:38 AM in response to jeromebob

As has already been pointed out, it's not possible at this time to hack an (un-jailbroken) iPad remotely and control it over the network. That's not what the problem is.


These symptoms could potentially be explained easily by someone hacking her accounts, specifically her iCloud account. Hacking an iCloud account would allow the attacker to access any Notes files that were synced with iCloud. So, once the attacker got access to her iCloud account, that Notes entry full of passwords would give the attacker access to everything else. Putting passwords on a Notes page is a VERY bad idea!


She should change the passwords on her iCloud account immediately, as well as the passwords on all accounts described in that Notes page. And then should delete that Notes page. She should use something like 1Password to manage passwords securely.

Aug 19, 2013 6:08 AM in response to alekzandr

Hey. This happened to me too - about 4 times - fourth today..


I don't store any private data on my ipad as I use it only for game/ watching tv on it so when it first happened to me, I was shocked. As soon as I saw it moving and typing things on the internet (For me they typed netframework 4 on google search) I exited safari and went to settings and turned the wifi off (during this process the hacker disturbed me to the point of me freaking out). My ipad does not have the 3G support however my ipad was still being controlled - entering gallery / camera ect. My first instinct was to cover the camera and then I recovered from the shock and force turned it off. It seems that once I turn it off the hacker cannot access it. I was annoyed - and after few hours I turned my ipad on again - it was fine for 30 minutes or so then the hacker returned. Since remote control should not work once internet has been disconnected - but it still moved - it seems it is some sort of zombie file installed in the ipad.


So this happened to me about 4 times including today... I didn't really mind if it got hacked since nothing is stored on my ipad except a few photos I took. Since I couldn't be bothered to clean up this mess I just left the ipad on my shelf for a few months... then I returned to it. Everytime I returned to it the same thing happened and ipad got abandoned again... I don't think it is to do with the internet security - I think it'a virus zombie file that was installed onto the ipad - so unless you swipe/format your ipad it won't be solved.


Now I can't be bothered to proof read what I've written so..

Just wanted to say it happened to me too




oh by the way - everytime it happened I was on safari - watching tv series (Safe sites with no adverts, virus etc)

So I think it is to do with safari? some sort of virus running while on safari..

Aug 19, 2013 6:16 AM in response to apple.irene

Again, not possible. You are not being remote controlled. There is no malware of any kind currently able to infect an iPad that hasn't been jailbroken, and there's no way to remote control it either. Either you have a very dirty screen that's reading sporadic touches, you have a very serious software issue and need to either reset or restore the iPad or you have a hardware issue that needs to be addressed. I would make an appointment at the Genius Bar at your nearest Apple Store if you need assistance with this.

Aug 19, 2013 6:35 AM in response to thomas_r.

It obviously exists, you say there currently is no such malware but look - there are people who have become victims.


A dirty screen would not result in automatic searching on the web - 'Netframework 4'

or continuously accessing other apps


Do you want me to chat with this hacker if he is willing ? I can try going to Note and chat or if he goes on camera again, I will try talk to him should I ?

Sep 12, 2013 12:27 PM in response to thomas_r.

This is obviously an issue Apple needs to check into. I have seen multiple forums, not just Apple's, where people are experiencing this. I know you guys are proud of your products and stand by their un-hackability but let's face it. People can do anything they want to these days. My iPad 2 has a VERY clean screen and got hacked. Today. Typing in legible things with the on screen keyboard is random? I think not. Don't get me wrong, I will continue to use and purchase Apple products. Lets face it, if the NSA can do what they do, why couldn't someone find a way to control an iPad?

Jan 28, 2014 12:17 PM in response to alekzandr

I have a Gen4 iPad 16GB Running iOS 7.0.4

My Wi-Fi Network has a 63-character WPA2 PSK.

It happened to me as soon as I turned my iPad on: Web Browser, then the App Store [selected the app on the top banner and looked through the screenshots], then Settings, then Notes, then Google Docs (which luckily wasn't logged-in). I kept hitting the home button to try and keep "whoever" out of things.

I turned the iPad off and back on, and it stopped.

I still feel pretty insecure about the whole incident.

Jan 28, 2014 1:13 PM in response to ChrisKraus1

Chris


As I said I watched it too..


I have 5 ipads in my house. 4 Apple TV's. 3 iphone 5s's. 3 Macbook pros and a 27' Imac....


I am a HUGE Apple person.. and happen to also be involved with programming for over 20 years and run a company with 10 technology guys. So I'm pretty in touch with it all.


100% I didn't have a jail broken Ipad.. It was a NEW in box Best Buy purchase.. An Apple rep could see my itunes purchases and see I buy everything there is and I wouldn't need a jail broke iPad for any benefit.. LOL..


As I may or may have not mentioned, I have nothing in my iPad anyhow that I would worry about finding. No passwords, bank stuff etc.. Just photos and games. At the time it occured I had just set it down and the "Subway Surfer" screen was actually showing. Then it clicked off and bam! Somebody was in and moving around my iPad.


When this happened I turned my SSID off so my Network wasn't aired around my neighborhood. But I also question the whole incident.


Take care

Alek

Jan 28, 2014 1:54 PM in response to ChrisKraus1

I 100% thought Apple had to go thru this with a FINE tooth comb looking for any suspicious.. But then again I think my comany submitted our app and it was approved in a week or two.. With 1 million apps how could they know whats in them and how they work? Makes sense.


I guess it wouldn't be until people starting noticing issues that would point out a rogue app... I thought about this with the APP STORE on my iMAC the other day.. I was looking for a coding app and I think it had some guys name as the seller and I was hesitant to purchase it.


I wasn't using Blue Tooth either.. If I remember I had the Ipad on Cel and Wifi at the same time though.. Meaning I was using the ATT cel service and also linked into wifi..


When I asked Apple. I was told by the Apple Genius Bar.. "Not possible".. and "Never heard of anyone having experienced that".. I felt like a dope..lol


THOSE WERE GREAT QUESTIONS CHRIS!

Jan 28, 2014 3:51 PM in response to ChrisKraus1

I believe that Apple uses software that can analyze the code and identify potentially dangerous or unwanted behaviors. That's the only way that they could possibly screen so many apps. That catches most stuff, but obviously it's not possible to entirely prevent bad apps from entering the App Store.


However, the security features of iOS mean that there are some serious limitations on what a bad app would be able to do. There's no way that a bad app from the App Store, on an iPad that is not jailbroken, could remotely control the iPad. That's simply not something that an app has privileges to do. Apps are only allowed to do certain things within a very carefully controlled sandbox.


Now, if someone malicious and very tech-savvy has had access to the iPad, it's conceivable that they could have installed something malicious. With physical access, much is possible. The iPad could have been jailbroken and the evidence of that jailbreaking removed, for example. However, it's very unlikely that anyone who had the know-how to do this would spoil the effort with such a flamboyant display of hacking as remote controlling your iPad. (Assuming there's even software for jailbroken iPads that would do that.)


In all, it's far more likely that this is something like a dirty screen, damaged hardware or system glitch.

Jan 30, 2014 1:11 AM in response to alekzandr

Is there away to mark this post/thread urgent!!!!

I have the same problem! My ipad has not been jailbroken either. I've noticed it happening on several occassions. It appears as if someone has remotely taken control over my ipad. They're able to open and close apps, click links, open emails. I first thought that it was a bluetooth problem, but I turned off bluetooth and disconected all of my blue tooth devices. I've also seen this occur on other wifi networks/routers besides my own. It's extremely disturbing. I think apple needs to be made aware that this is happening. I first noticed the problem while I was reading and using the Kindle app. But it's funny you should mentioned Subway Surfer because my kids use that app all of the time and I recall the problem occuring with that app opened. What should I do? I need my ipad but I'm affraid to use it now. I ony hope that whoever is controling my ipad has not been able to hack into other sensitive accounts. Common apple, you guys need to look into this.

Jan 30, 2014 9:48 AM in response to thomas_r.

Thomas


Thanks for the response. As you can see I have no angle with my initial post.. I posted it, even forgetting about it until a year or so later I saw emails from the forum responses.. So understand I'm not in here for anything more than learning..


So I ask.. 1) When people day "Dirty Screen".. What does that mean? Do you mean an actual dirty screen?


4) Check my hardware by Apple.. Do you think that hardware could have a bug in it where it looks like the machine is doing things a human would do? Like get out of one app, go into another app.. or jump in your contacts and browse... I ask this because it didn't look like any glitch to me. More of a human or dedicated program.


Thanks

Jan 30, 2014 11:04 AM in response to alekzandr

So I ask.. 1) When people day "Dirty Screen".. What does that mean? Do you mean an actual dirty screen?


Yes. A dirty screen can cause all manner of spurious input from the touch screen. I've personally seen it happen myself... not with an iPad, but with another brand of tablet that a little kid was using. The thing was filthy, and after it was wiped off, it worked fine.


4) Check my hardware by Apple.. Do you think that hardware could have a bug in it where it looks like the machine is doing things a human would do?


Absolutely. You'd be surprised how often people ascribe a purpose to completely random actions. I've seen it many times, where a random issue caused by a dirty screen or a bad mouse (in the case of a computer) was blamed on a hacker.

Jan 30, 2014 11:17 AM in response to alekzandr

1) Okay, I admit it, My screen is "dirty". You can see everywhere I have poked my finger and the places where I swipe to unlock/power off. I should use one of those alcohol wipes. And this should top my priority list. *wink*


4) I'll raise you one. I would love to be able to look at my own operating system logs. I would at least like peek at a copy of what comes out when they make you go through iOS Diagnostics. But, I did buy an Apple product, and I mostly bought into their model. If there is a debug tool for iOS, made by Apple or otherwise, would someone post it?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Ipad Hacked - I watched somebody go into my contacts and browse around

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.