Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Has my phone been hacked??

B

Bermyvic

macrumors newbie
Original poster
Dec 22, 2016
1
1
Any help please??

From log:

{"restore_payload_version":"Unknown","restore_type":"OTAUpdate","os_version":"14A456","itunes_version":"14A456","bug_type":"183","name":"iPhoneRestore","restore_error":"27"}
a65cec40 : posting to https://xp.apple.com/report/2/psr_ota length = 441
a65cec40 : data = {"clientId":"8BEF10B9-9B53-49E2-92F8XXXX>>>>>5966","events":[{"targetOSVersion":"14B100","reportVersion":1,"batteryLevel":71,"storageCapacity":60470,"dataFsCapacity":56325,"systemFsCapacity":4144,"systemFsFree":640,"event":"incompleteInstall","currentOSVersion":"14A456","dataFsFree":21055,"type":"ota","batteryIsCharging":false,"deviceClass":"iPhone","eventTime":"1479606207270","deviceModel":"N61AP","currentOSType":"user","uptime":3866}]}
a65cec40 : posting to https://xp.apple.com/report/2/psr_ota length = 904
a65cec40 : data = {"clientId":"E8CF7D88-8F07-4AFC-ACEBXXXX>>>>>C13F","events":[{"targetOSVersion":"14B100","reportVersion":1,"batteryLevel":74,"storageCapacity":60470,"dataFsCapacity":56325,"systemFsCapacity":4144,"systemFsFree":640,"event":"prepareFinished","currentOSVersion":"14A456","dataFsFree":21037,"type":"ota","batteryIsCharging":false,"deviceClass":"iPhone","eventTime":"1479606535908","deviceModel":"N61AP","currentOSType":"user","brainVersion":"14A500","result":"success","uptime":4194},{"targetOSVersion":"14B100","reportVersion":1,"purgeableSpace":5049,"batteryLevel":71,"dataFsCapacity":56325,"systemFsCapacity":4144,"storageCapacity":60470,"event":"prepareStarted","systemFsFree":640,"dataFsFree":21055,"type":"ota","batteryIsCharging":false,"deviceClass":"iPhone","eventTime":"1479606207305","deviceModel":"N61AP","currentOSVersion":"14A456","currentOSType":"user","brainVersion":"14A500","uptime":3866}]}
6dfff000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6dfff000 : session com.apple.UpdateMetrics.UMEventSubmitter didReceiveChallenge
6df73000 : session com.apple.UpdateMetrics.UMEventSubmitter didReceiveChallenge
6e04b000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6e04b000 : Unexpected XPC error on peer connection: Connection invalid
6e163000 : Purge update service connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e0d7000 : Update brain connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e1ef000 : Could not get entitlement value for com.apple.private.softwareupdated-helpers: Error Domain=NSPOSIXErrorDomain Code=3 "No such process"
6e1ef000 : MobileSoftwareUpdateErrorDomain error 9 - Client does not have entitlement com.apple.private.softwareupdated-helpers
6e27b000 : Unexpected XPC error on peer connection: Connection invalid
6df37000 : Unable to load trust cache: 0xe00002d8
6df37000 : Failed to load update brain trust cache
6df37000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6dfc3000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6df37000 : Unexpected XPC error on peer connection: Connection invalid
6e04f000 : Unexpected XPC error on peer connection: Connection invalid
6df37000 : Update brain connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6dfc3000 : Purge update service connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e037000 : Unable to load trust cache: 0xe00002d8
6e037000 : Failed to load update brain trust cache
6e037000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6e0c3000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6e0c3000 : Purge update service connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e14f000 : Unexpected XPC error on peer connection: Connection invalid
6e037000 : Update brain connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e0ab000 : Unable to load trust cache: 0xe00002d8
6e0ab000 : Failed to load update brain trust cache
6e0ab000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6e137000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6e15f000 : Unable to load trust cache: 0xe00002d8
6e15f000 : Failed to load update brain trust cache
6e15f000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6e0d3000 : Unexpected XPC error on peer connection: Connection invalid
6e15f000 : Entering handle_brain_is_loadable
6e15f000 : Unable to
 
  • Like
Reactions: Rocksanne
Your router can be. And used to serve ads adware and used to send users to fake addresses and reroute traffic if DNSChanger or other malware has crawled in.
 
IowaLynn said:
Your router can be. And used to serve ads adware and used to send users to fake addresses and reroute traffic if DNSChanger or other malware has crawled in.
Click to expand...
How does that relate to what the OP posted?
 
Bermyvic said:
Any help please??

From log:

{"restore_payload_version":"Unknown","restore_type":"OTAUpdate","os_version":"14A456","itunes_version":"14A456","bug_type":"183","name":"iPhoneRestore","restore_error":"27"}
a65cec40 : posting to https://xp.apple.com/report/2/psr_ota length = 441
a65cec40 : data = {"clientId":"8BEF10B9-9B53-49E2-92F8XXXX>>>>>5966","events":[{"targetOSVersion":"14B100","reportVersion":1,"batteryLevel":71,"storageCapacity":60470,"dataFsCapacity":56325,"systemFsCapacity":4144,"systemFsFree":640,"event":"incompleteInstall","currentOSVersion":"14A456","dataFsFree":21055,"type":"ota","batteryIsCharging":false,"deviceClass":"iPhone","eventTime":"1479606207270","deviceModel":"N61AP","currentOSType":"user","uptime":3866}]}
a65cec40 : posting to https://xp.apple.com/report/2/psr_ota length = 904
a65cec40 : data = {"clientId":"E8CF7D88-8F07-4AFC-ACEBXXXX>>>>>C13F","events":[{"targetOSVersion":"14B100","reportVersion":1,"batteryLevel":74,"storageCapacity":60470,"dataFsCapacity":56325,"systemFsCapacity":4144,"systemFsFree":640,"event":"prepareFinished","currentOSVersion":"14A456","dataFsFree":21037,"type":"ota","batteryIsCharging":false,"deviceClass":"iPhone","eventTime":"1479606535908","deviceModel":"N61AP","currentOSType":"user","brainVersion":"14A500","result":"success","uptime":4194},{"targetOSVersion":"14B100","reportVersion":1,"purgeableSpace":5049,"batteryLevel":71,"dataFsCapacity":56325,"systemFsCapacity":4144,"storageCapacity":60470,"event":"prepareStarted","systemFsFree":640,"dataFsFree":21055,"type":"ota","batteryIsCharging":false,"deviceClass":"iPhone","eventTime":"1479606207305","deviceModel":"N61AP","currentOSVersion":"14A456","currentOSType":"user","brainVersion":"14A500","uptime":3866}]}
6dfff000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6dfff000 : session com.apple.UpdateMetrics.UMEventSubmitter didReceiveChallenge
6df73000 : session com.apple.UpdateMetrics.UMEventSubmitter didReceiveChallenge
6e04b000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6e04b000 : Unexpected XPC error on peer connection: Connection invalid
6e163000 : Purge update service connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e0d7000 : Update brain connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e1ef000 : Could not get entitlement value for com.apple.private.softwareupdated-helpers: Error Domain=NSPOSIXErrorDomain Code=3 "No such process"
6e1ef000 : MobileSoftwareUpdateErrorDomain error 9 - Client does not have entitlement com.apple.private.softwareupdated-helpers
6e27b000 : Unexpected XPC error on peer connection: Connection invalid
6df37000 : Unable to load trust cache: 0xe00002d8
6df37000 : Failed to load update brain trust cache
6df37000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6dfc3000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6df37000 : Unexpected XPC error on peer connection: Connection invalid
6e04f000 : Unexpected XPC error on peer connection: Connection invalid
6df37000 : Update brain connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6dfc3000 : Purge update service connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e037000 : Unable to load trust cache: 0xe00002d8
6e037000 : Failed to load update brain trust cache
6e037000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6e0c3000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6e0c3000 : Purge update service connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e14f000 : Unexpected XPC error on peer connection: Connection invalid
6e037000 : Update brain connection handler: <error: 0x1a04abaf0> { count = 1, transaction: 0, voucher = 0x0, contents =
"XPCErrorDescription" => <string: 0x1a04abdf0> { length = 22, contents = "Connection interrupted" }
}
6e0ab000 : Unable to load trust cache: 0xe00002d8
6e0ab000 : Failed to load update brain trust cache
6e0ab000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6e137000 : Loading update brain bundle at /private/var/MobileAsset/Assets/com_apple_MobileAsset_MobileSoftwareUpdate_UpdateBrain/<<<<<<<<<<<<<<<<<<UDID>>>>>>>>>>>>>>>>>>.asset/AssetData/com.apple.MobileSoftwareUpdate.UpdateBrainService.xpc
6e15f000 : Unable to load trust cache: 0xe00002d8
6e15f000 : Failed to load update brain trust cache
6e15f000 : MobileSoftwareUpdateErrorDomain error 7 - No service connection
6e0d3000 : Unexpected XPC error on peer connection: Connection invalid
6e15f000 : Entering handle_brain_is_loadable
6e15f000 : Unable to
Click to expand...



I know this is an old post... but was your phone ever hacked ...,because this happened to me ....
 
MacDawg said:
Umm, exactly what happened to you?
Click to expand...

I noticed "UpdatedBrainService" on my phone and I'm wondering what that means... ive never seen that before

Command: com.apple.MobileSoftwareUpdate.UpdateBrainService

Path: /private/var/run/com.apple.xpcproxy.RoleAccount.staging/com.apple.MobileSoftwareUpdate.UpdateBrainService.16667zzz7721994.466282666.xpc/com.apple.MobileSoftwareUpdate.UpdateBrainService

Version: 1.0 (1)
 
  • Like
Reactions: Rocksanne
Rrr “That’s Impossible” said:
I’ve been hacked on an iPhone 6+, 7, MacBook Air, and Retina. Far from funny if you’re being mocked by people that think they know it all........They took about 10K from online banking. I could see their activity looking at my browser history, etc. I could go on and on, but there’s no point.
Click to expand...

I certainly was not mocking you, and I apologize if that is how it came across. If you have been hacked and had money stolen that is just despicable and I am very sorry for the problems. Hopefully the authorities will be able to help.
 
Raist3001 said:
I certainly was not mocking you, and I apologize if that is how it came across. If you have been hacked and had money stolen that is just despicable and I am very sorry for the problems. Hopefully the authorities will be able to help.
Click to expand...
Thank you, but unfortunately the FBI is the only authority handling online crimes.
 
Newtons Apple said:
If you call your bank while you were watching it happening, they should have been able to reverse the funds.

Sounds like you AppleID was compromised.
Click to expand...
The bank refunded the money. My point is that someone could access ALL of my digital information, delete my files, etc.
[doublepost=1542228450][/doublepost]
Five_Oh said:
That sucks! Sorry to hear it.

How did you determine it was your mobile device that was compromised and not something else? If you care to share. If not, I understand.
Click to expand...
My Mac air literally started deleting itself..the Console...I recorded it with the standard iPhone 6+ camera. Next I removed the SIM card and ran down the battery. Days later I went to a store to have the video put on a DVD. The format was unrecognizable...
[doublepost=1542228532][/doublepost]
Five_Oh said:
Not actually true.

I understand many have difficulty getting local authorities interested, but many police departments DO investigate intrusions and e-fraud.
Click to expand...
Was unaware...not like that in Austin
 
  • Like
Reactions: Newtons Apple
Rrr “That’s Impossible” said:
The bank refunded the money. My point is that someone could access ALL of my digital information, delete my files, etc.
Click to expand...

If you AppleID was compromised, it was just like you were doing it.

A couple of days ago when I picked up my iPhone in the morning, Apple had disabled my Apple ID and forced me to change passwords. Never could find out why but it happened the same morning to multiple people in these forums.

Apple had their reasons, reason that I will never know.

Glad you got your money back
 
  • Like
Reactions: Rrr “That’s Impossible”
Rrr “That’s Impossible” said:
The bank refunded the money. My point is that someone could access ALL of my digital information, delete my files, etc.
[doublepost=1542228450][/doublepost]
My Mac air literally started deleting itself..the Console...I recorded it with the standard iPhone 6+ camera. Next I removed the SIM card and ran down the battery. Days later I went to a store to have the video put on a DVD. The format was unrecognizable...
[doublepost=1542228532][/doublepost]
Was unaware...not like that in Austin
Click to expand...

I'd like to hear more about what happened. You watched them browse your browser history, take 10k from your bank account, and delete your laptop while you filmed it? Did disconnecting from the internet ever cross your mind?
 
OLDGUYWITHAHIFI said:
I'd like to hear more about what happened. You watched them browse your browser history, take 10k from your bank account, and delete your laptop while you filmed it? Did disconnecting from the internet ever cross your mind?
Click to expand...
[doublepost=1542230075][/doublepost]This is where people roll their eyes. I disabled all network utilities..under system preferences. Everything seemed fine until console activity started back up. A Bluetooth DUN was remotely installed, allowing the hacker to access my Mac using the home phone modem. I have 2TB of unambiguous digitally verifiable evidence on a Lacie External HD. Apple laughed at me and told me to hire a P.I.. Sounds crazy... I would call BS, except it happened to me.
[doublepost=1542232544][/doublepost]
Rrr “That’s Impossible” said:
[doublepost=1542230075][/doublepost]
This is where people roll their eyes. I disabled all network utilities..under system preferences. Everything seemed fine until console activity started back up. A Bluetooth DUN was remotely installed, allowing the hacker to access my Mac using the home phone modem. I have 2TB of unambiguous digitally verifiable evidence on a Lacie External HD. Apple laughed at me and told me to hire a P.I.. Sounds crazy... I would call BS, except it happened to me.
Click to expand...
[doublepost=1542232819][/doublepost]
Rrr “That’s Impossible” said:
[doublepost=1542230075][/doublepost]
This is where people roll their eyes. I disabled all network utilities..under system preferences. Everything seemed fine until console activity started back up. A Bluetooth DUN was remotely installed, allowing the hacker to access my Mac using the home phone modem. I have 2TB of unambiguous digitally verifiable evidence on a Lacie External HD. Apple laughed at me and told me to hire a P.I.. Sounds crazy... I would call BS, except it happened to me.
[doublepost=1542232544][/doublepost]
Click to expand...
I SENT APPLE INFORMATION FROM NETWORK UTILITY IN AN EMAIL AT AROUND MIDNIGHT. THE NEXT DAY, I CHECKED MY EMAIL AND NOTICED MY MESSAGE WAS NOT SENT UNTIL 2:00AM. I called Yahoo and was informed that the email was removed from the server and modified! They were able to recover the original message and APPLE REFUSED TO LOOK AT IT!!
[doublepost=1542232883][/doublepost]
Rrr “That’s Impossible” said:
[doublepost=1542230075][/doublepost]
This is where people roll their eyes. I disabled all network utilities..under system preferences. Everything seemed fine until console activity started back up. A Bluetooth DUN was remotely installed, allowing the hacker to access my Mac using the home phone modem. I have 2TB of unambiguous digitally verifiable evidence on a Lacie External HD. Apple laughed at me and told me to hire a P.I.. Sounds crazy... I would call BS, except it happened to me.
[doublepost=1542232544][/doublepost]
[doublepost=1542232819][/doublepost]
I SENT APPLE INFORMATION FROM NETWORK UTILITY IN AN EMAIL AT AROUND MIDNIGHT. THE NEXT DAY, I CHECKED MY EMAIL AND NOTICED MY MESSAGE WAS NOT SENT UNTIL 2:00AM. I called Yahoo and was informed that the email was removed from the server and modified! They were able to recover the original message and APPLE REFUSED TO LOOK AT IT!!
Click to expand...
 
Last edited:
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back