Can the iPhone5 be hacked remotely by a hacker?

I work for a technology company and one of our employees shared an incident about her iPhone5 being hacked remotely. The hacker gained access to her device overnight while her phone was unlocked. The hacker watched her baby monitor video feed from the baby monitoring app (including taking pictures and video from the device), posted about the baby to her FB account, browsed on Safari, including some searches of French books on amazon and Scott Trading sites. When I spoke with the mobile device team, they were not familiar with any iOS security gaps that would allow a hacker to remotely gain control of an iPhone, however, the activities on her device suggest that this is possible.


I found some articles from 2009 regarding a SMS virus that allowed hackers to gain remote access to a device, however, our mobile device team is certain that this gap would be closed by now.


Is anyone familiar with an existing security gap on the iPhone5? What would you recommend would be the next action for her? She is intending to delete her icloud account, change all her passwords and wipe her device.

iPhone 5, iOS 6.1.1

Posted on Mar 19, 2013 1:23 PM

Reply
252 replies

Apr 21, 2016 12:40 PM in response to me2on6

me2on6 wrote:


There's another REALLY IMPORTANT item that I've discovered that relates to this phantom behaviors: They ONLY occur WHEN MY iPHONE IS WITHIN a certain proximity (about 2 FEET) of MY DESKTOP computer. I think that BLUETOOTH devices/drivers from the computer may be responsible and gaining access to the IOS. I wasn't sure to write this initially, so I didn't include it, but I've done about a hundred tests so far just on proximity (next to my computer vs 1 foot away vs 2 ft away and beyond), and I notice that the behaviors ALWAYS stop at (approximately) 2 feet away. More recently, I'm starting to test disabling vs uninstalling the bluetooth drivers on the desktop (since I don't use bluetooth on my computer or iphone). The trick with uninstalling is I think Windows updates keep re-adding the bluetooth driver every time I uninstall it. So lately I'm experimenting with just "disabling" it under Bluetooth Settings.


Once again, this has nothing to do with hacking. It's long past time for you to take your phone to Apple and have them look at it.

Apr 21, 2016 12:41 PM in response to DavidOpdyke

DavidOpdyke wrote:


This thread is all over the place. Last post, you were SURE it was software, now you are SURE it is hardware, even though bluetooth has a range FAR greater than 2 feet. It's funny to read, but it's time to find a way to not get updates on this thread. You should get a different phone, it's clear that your paranoia will never end with this phone. #TeamMeg

Never had my own hashtag before! 😀

Apr 22, 2016 10:33 PM in response to IdrisSeabright

If you read any (preferably all) of my posts, it's abundantly obvious that the phone is hacked. Because of your previous answers, and again here, I'll ask you again, Meg, please don't respond to my posts. Your answers are not appreciated. I'd rather hear from others and hear their experiences. Also, when you write others (above), "You realize, don't you, that you're responding to a post that's a year and a half old?", that's pretty rude. People are writing in because they have relevant issues, not because they want to be abused. In my case, it's not an iPhone 5, it's the SAME behaviors everyone's describing, but on an iPhone 6... so that's current no matter how old the thread is. I'm sure all the posters want to see all the information others have to share, even (especially) a year later. If you're constantly responding to a thread and very active here daily, these are obviously important, relevant issues. Don't dismiss the thread. Also, while you removed my answer to your question (the one about Bluetooth "versus" software), it's important to share with others my response which included, "I'm just adding bluetooth to the list of possible culprits, including software, firmware. I believe bluetooth communications require software last time I checked?" I also included in the post you deleted, "you shouldn't be telling people to just "get a different phone", since that may also be counterproductive. I didn't create this thread lol. I'm just 1 of 100s of people, all with the same problem, looking for solutions. Remember, from my posts, if you read them carefully, you'll see that I've experienced this BEFORE & AFTER Apple sent a brand new phone out. Also, calling customers "paranoid" because they're reporting issues here isn't constructive, It's best not to dismiss these issues and users. Last time I checked... #CustomersMatter

Apr 23, 2016 6:49 AM in response to me2on6

me2on6 wrote:


If you read any (preferably all) of my posts, it's abundantly obvious that the phone is hacked.

No, really, it's abundantly obvious that they have not been hacked and that you are misinterpreting things and are unwilling to do the troubleshooting that would probably resolve your issue because of your idee fixe. I am concerned that other people with similar, solvable problems will read your posts and panic.

Apr 23, 2016 1:56 PM in response to Lschoend

Lschoend wrote:


I have read all of these comments and the ones that claim your iPhone can't be hacked are delusional. I watched both my and my daughter's iPhones (5 and 5s) operate themselves. No cables were attached. Whoever was controlling the phone was opening apps, trying to download music, etc. and was also able to prevent me from getting to Settings or turn off the phone.

What you're describing sounds like a bad digitizer. There's an axiom taught to medical students that applies here as well: When you hear hoofbeats, think horses, not zebras. Given the mountains of professional evidence that says your phone can't be remotely hacked, making the assumption that your phone has been hacked rather than some other, more likely explanation, is definitely jumping straight past zebras right to unicorns.

Apr 23, 2016 2:30 PM in response to Lschoend

Lschoend wrote:


I have read all of these comments and the ones that claim your iPhone can't be hacked are delusional. I watched both my and my daughter's iPhones (5 and 5s) operate themselves. No cables were attached. Whoever was controlling the phone was opening apps, trying to download music, etc. and was also able to prevent me from getting to Settings or turn off the phone. I spent 20 minutes playing games and finally had to do a hard reset then quickly erase the phone. Was probably malware from an app that was downloaded, who knows, but to assert that it was a bad cable or anything else is just nonsense. I would rather be informed and alert than lulled into some false sense of security.

Considering that the FBI just paid a professional hacker $1.3 million to hack an iPhone, you really need to explain to them that it was unnecessary, that it's clear that any iPhone can be hacked for free.

Apr 23, 2016 2:47 PM in response to IdrisSeabright

Sorry to disappoint you both, Meg and Tonefox, but Apple Support agreed with me. Digitizers were not mentioned. I received clear instructions to erase all content and settings and set it up as a new phone, then selectively reinstall only trusted apps. As far as unicorns go, assuming that two different device models both developed the same hardware problem, independently, within less than 24 hours of each other sounds a lot closer to invisible pink unicorns with glitter. And by the way, in my profession we routinely operate entire banks of iPhones remotely as part of load testing mobile apps. All you need is the software on the phone and a remote system to control it. Granted we installed it deliberately, but what we can do anyone else can do. In the future, your comments would be far more helpful and perhaps taken seriously were they not so disrespectful and dismissive.

Apr 23, 2016 3:01 PM in response to IdrisSeabright

Meg I (and everyone else) routinely install software in the form of apps. All it takes is an app that is not what it seems. This is a widely known problem (flashlight apps are infamous for this but there are many others).


For those confused by the FBI paying money to get a phone hacked, they misunderstand the problem. Trying to hack a phone once it is locked is obviously difficult but not impossible. My phones were only being remotely operated when they were unlocked. Also this is software I probably installed unawares, not software someone tried to install remotely. Installing software remotely and using already installed software to control a device are two completely different problems.

Apr 23, 2016 3:09 PM in response to Lschoend

Lschoend wrote:


Meg I (and everyone else) routinely install software in the form of apps. All it takes is an app that is not what it seems. This is a widely known problem (flashlight apps are infamous for this but there are many others).


For those confused by the FBI paying money to get a phone hacked, they misunderstand the problem. Trying to hack a phone once it is locked is obviously difficult but not impossible. My phones were only being remotely operated when they were unlocked. Also this is software I probably installed unawares, not software someone tried to install remotely. Installing software remotely and using already installed software to control a device are two completely different problems.

If it were as easy as you seem to think, there would be security experts posting articles about it all over the place. The instances in which apps that were downloaded by the person who owns the phone which turned out to be malicious, were very limited and the exploits were quickly patched. But, the important thing is they were not installed remotely. They required someone to download the apps from an untrustworthy source (in all but one case). Is it absolutely impossible? No. Is it highly unlikely? Yes. Is it likely that it's what happened to your phones? No.

Mar 12, 2017 12:57 AM in response to IdrisSeabright

Right but in my situation I was uneducated in the world of hacking and like them, thought my phone needed repair. It wasn't until $40k later that I found out I was hacked and a victim of identity theft at the hands of a relative who jailbroke my phone. She now has 2 warrants for her arrest but it has taken me 3 years to get to that point. I had to spend my every waking moment educating myself on the world of hacking; first with Android then IOS. ****, at one point I carried both, as well as a Window's phone just to try and keep ahead of my "hacker". Apple needs to realize this **** is real and it destroys lives. If all these companies would take the developer tools off their websites it would help. The FCC should also require mobile service providers to hide your IP and MAC addresses. The same goes for internet service providers. These things wont stop it all but it will cut down on the number of occurrences.

Mar 12, 2017 6:57 PM in response to Crushoncorey

Crushoncorey wrote:


Right but in my situation I was uneducated in the world of hacking and like them, thought my phone needed repair. It wasn't until $40k later that I found out I was hacked and a victim of identity theft at the hands of a relative who jailbroke my phone. She now has 2 warrants for her arrest but it has taken me 3 years to get to that point. I had to spend my every waking moment educating myself on the world of hacking; first with Android then IOS. ****, at one point I carried both, as well as a Window's phone just to try and keep ahead of my "hacker". Apple needs to realize this **** is real and it destroys lives. If all these companies would take the developer tools off their websites it would help. The FCC should also require mobile service providers to hide your IP and MAC addresses. The same goes for internet service providers. These things wont stop it all but it will cut down on the number of occurrences.

You gave your relative physical access to your phone and they did bad things. Hiding your IP and MAC addresses would not have stopped that. If Apple took developer tools off their websites, people wouldn't be able to develop apps.


What really needs to happen is that people need to learn to treat their phones like they would their wallet, their social security number, their passport and their house keys. I'm sorry you had to learn that lesson the hard way. But, like falling for phishing scams, there's a limit to what anyone else can do to protect you from yourself.


Enable Find My iPhone on your phone. Do NOT share the passcode to your Apple ID with anyone. Put a complex password on your phone. Do NOT share that passcode with anyone. Do NOT install apps from anyplace but the App Store. If you do those things, there is almost no chance your phone can be compromised at this time. These things are far more effective than any of the things you suggest would be.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Can the iPhone5 be hacked remotely by a hacker?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.