You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

My Weather Inbox ????

I had something show up on my iPhone 6 that looked like it was a normal app. Alas, it doesn't appear to be. It looked all right until it asked to be installed through settings. Now it shows up as an actual email address and it appears that it is spam email. I tried to delete the inbox, and there is no option to delete it. Any ideas from where this came? The host name is 20160104.imap.email? I have turned it off and deleted turned off the server, but I don't want it on my phone. HELP!

Posted on Jan 3, 2016 7:10 PM

Reply
117 replies

Jan 10, 2016 5:55 AM in response to doncow

There doesn't seem to be anything malicious about this "my Weather Inbox". I found it in a Weather app called MeteoEarth. Doesn't look like harmful spam, except for ads. But those can be picked to your liking. No reason to freak out here! I actually like having the inbox. It offers more than just weather.

Feb 1, 2016 1:14 PM in response to JColger2000

I just got off the phone with my parents who experienced this symptom with considerable concern. They had noticed a new "From" email address selectable when composing a new message on the iPhone. The email address was apparently two randomly selected works and ended with the domain @my.minbox.email. The installed Profile in Settings>General was something along the lines of "MyWeatherRadar Click Install for your FREE Weather Radar Alerts!"


I had them look for the potentially offending applications, and suggested just deleting all third-party weather-related applications. I then instructed on how to remove the unwanted Profile.


What I have determined so far is the bogus Profile is what's called a Provisioning Profile normally used for installing beta applications outside of the App Store as well as for provisioning phones for employees in an enterprise environment. New profiles may be delivered via an installed app, or possibly, downloaded via Safari. In either case, the phone is to take the user to Settings, show the profile with an Install button. Tapping Install should prompt "Install Provisioning Profile: Installing this provisioning profile will change settings on your iPhone. [Cancel] [Install Now]"


A clue to me is the name of the provisioning profile including the words "Click Install for your FREE..." To anyone not familiar with the ins and outs of iOS development and security issues, this sounds innocuous enough.


Provisioning Profiles seem to bestow all sorts of capabilities, such as creating new accounts, installing new root certificates, and in the wrong hands, posing a certain security risk. Applications which install a new root certificate theoretically have the ability to deep-inspect network traffic or even inspect / modify network traffic by setting up a proxy server.


At this point, I'm unsure whether to advise my parents to change their iCloud passwords just to be on the safe side, but probably prudent. In the mean time, I will educate my friends and family to be careful of any website or app that wants you to install a provisioning profile on your phone. Just don't, unless you know exactly why you are doing so.

My Weather Inbox ????

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.