iPhone Malware

shulk3337

macrumors newbie
Original poster
Jul 31, 2017
7
0
If I'm currently using IOS 10.3.1 on my non-jailbroken iPhone instead of 10.3.3 version, is there any possibility of getting malware or any kind of virus in my device?

Because of all the security holes that were patched in 10.3.2
 

shulk3337

macrumors newbie
Original poster
Jul 31, 2017
7
0
But for example there are other malware like Pegasus, could I be affected with some other malware working with exploits patched in 10.3.2?
 

Stefan johansson

macrumors 65816
Apr 13, 2017
1,294
607
Sweden
But for example there are other malware like Pegasus, could I be affected with some other malware working with exploits patched in 10.3.2?
But for example there are other malware like Pegasus, could I be affected with some other malware working with exploits patched in 10.3.2?
An iPhone withouth jailbreak cannot install anything that's not certified by Apple,regardless of iOS version.
 

jetsam

macrumors 6502a
Jul 28, 2015
570
312
If I'm currently using IOS 10.3.1 on my non-jailbroken iPhone instead of 10.3.3 version, is there any possibility of getting malware or any kind of virus in my device?

Because of all the security holes that were patched in 10.3.2
There were a number of security patches in iOS 10.3.3.
Here's Apple's list:
https://support.apple.com/en-us/HT207923

The most well-publicized security flaw, known as the "Broadpwn exploit", is the one listed last:

"Impact: An attacker within range may be able to execute arbitrary code on the Wi-Fi chip

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-9417: Nitay Artenstein of Exodus Intelligence"

This one not only affects iPhones, but also Android phones.

I recommend you update to 10.3.3.
 
  • Like
Reactions: Floris

Floris

macrumors 68020
Sep 7, 2007
2,381
1,472
Netherlands
It's strongly recommended to upgrade to 10.3.3, and there's no reason not to.
Your apps, data, files, etc will all remain working, nothing gets removed or suddenly works different.
You're going from 10.x to 10.x, they're maintenance releases.

The wifi exploit will be abused surely, as everything else. You fix issues you want to have fixed.
 
  • Like
Reactions: jetsam

shulk3337

macrumors newbie
Original poster
Jul 31, 2017
7
0
It's strongly recommended to upgrade to 10.3.3, and there's no reason not to.
Your apps, data, files, etc will all remain working, nothing gets removed or suddenly works different.
You're going from 10.x to 10.x, they're maintenance releases.

The wifi exploit will be abused surely, as everything else. You fix issues you want to have fixed.
Okay, I have just updated, but should I be worried of getting any malware during this period of time that I was with 10.3.1? By visiting websites with scam and annoying pop-ups, that could have used known exploits?
[doublepost=1501534214][/doublepost]
There were a number of security patches in iOS 10.3.3.
Here's Apple's list:
https://support.apple.com/en-us/HT207923

The most well-publicized security flaw, known as the "Broadpwn exploit", is the one listed last:

"Impact: An attacker within range may be able to execute arbitrary code on the Wi-Fi chip

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-9417: Nitay Artenstein of Exodus Intelligence"

This one not only affects iPhones, but also Android phones.

I recommend you update to 10.3.3.
I have just updated, but I am worried that during this time I was using 10.3.1 I could have got malware or virus by using Webkit or Kernel exploits patched with 10.3.2 or 10.3.3. Could this be possible? Should I be worried?
 

simonsi

macrumors 601
Jan 3, 2014
4,850
734
Auckland
The danger period is the period you stay on an older release before updating. The Update alerts the general population to the fact an exploit exists on an earlier version, until that point the general public (including malware writers), may not even be aware that the exploit exists so can't write malware for it.

Consequently you should only be worried about staying on an older release, but I'm not aware of any malware for non-jailbroken devices running 10.3.1 so in the arms race you are safe. For the moment.

Upgrade, stay up to date, worry less.
 
  • Like
Reactions: shulk3337

EM2013

macrumors 68020
Sep 2, 2013
2,140
1,869
Why? Sorry for being a little paranoid, but I would like to understand why all these exploits couldn't be used to infect iPhones running older iOS versions than 10.3.2 or 10.3.3. Thanks
As it has been stated multiple times before, nothing will happen. I literally was on 10.3 since it was released, and just recently updated.
Nothing will happen. There are no viruses.
 
  • Like
Reactions: shulk3337

Begue

Suspended
Aug 1, 2017
1
0
Why haven't you upgraded when you know that the upgrade included security patches?
 

shulk3337

macrumors newbie
Original poster
Jul 31, 2017
7
0
Why haven't you upgraded when you know that the upgrade included security patches?
Many friends told me not to update to iOS 10.3.2 because of all the battery problems that it brings, and then when 10.3.3 was released I just waited a week in order to see if it also had battery problems.
But now that I discovered all these security patches I am just a little paranoid of being infected by some malware using these exploits like Pegasus (iOS malware) used to do.
[doublepost=1501581529][/doublepost]
The danger period is the period you stay on an older release before updating. The Update alerts the general population to the fact an exploit exists on an earlier version, until that point the general public (including malware writers), may not even be aware that the exploit exists so can't write malware for it.

Consequently you should only be worried about staying on an older release, but I'm not aware of any malware for non-jailbroken devices running 10.3.1 so in the arms race you are safe. For the moment.

Upgrade, stay up to date, worry less.
So, although that period of time that I was using an outdated iOS version, I shouldn't be worrued of getting any malware, am I right? The thing is that two weeks ago (still using 10.3.1) I was redirected in Reddit to a website called biqle.ru, and a lot of pop-ups just appeared in Safari, so I'm worried if I could get malware through that non realible website.
Thank you for all your answers and help.
 

simonmet

macrumors 68030
Sep 9, 2012
2,589
3,505
Sydney
iOS is one of the most secure operating systems. It’s called “walled garden” for a reason. :p

Most people don’t worry this much when they visit dodgy sites with out of date Windows.

Find and use a content blocker in the App Store to help with annoying websites.
 
  • Like
Reactions: shulk3337

CTHarrryH

macrumors 68020
Jul 4, 2012
2,295
894
There are people with every release who have or claim to have battery problems. Most people have no battery issues on any production release. If you don't have a problem on 1 release you won't on another - from people's comments. Be aware however this is after a day or so on new release as the devices seem to index or do something on new releases. I'm not saying that people don't have real battery issues but sometimes caused by certain applications and others with poor cellular and wifi signals. Battery problems are real but if you don't have them today and do the same thing tomorrow you won't have them tomorrow.
 

simonsi

macrumors 601
Jan 3, 2014
4,850
734
Auckland
Many friends told me not to update to iOS 10.3.2 because of all the battery problems that it brings, and then when 10.3.3 was released I just waited a week in order to see if it also had battery problems.
But now that I discovered all these security patches I am just a little paranoid of being infected by some malware using these exploits like Pegasus (iOS malware) used to do.
[doublepost=1501581529][/doublepost]
So, although that period of time that I was using an outdated iOS version, I shouldn't be worrued of getting any malware, am I right? The thing is that two weeks ago (still using 10.3.1) I was redirected in Reddit to a website called biqle.ru, and a lot of pop-ups just appeared in Safari, so I'm worried if I could get malware through that non realible website.
Thank you for all your answers and help.
I've had no battery issues on any 10.x.x release. If you have a battery issue most cases are down to an app running wild, easily found and dealt with.

I would be more concerned about running an out of date iOS than about any upgrade issues - upgrade issues are RARE. By its very nature problems are massively over-represented on forums because the total forum experience is a tiny proportion of users and almost totally excludes reports from happy users who had no problems.

You have a nasty website/advert, nothing more.
 
  • Like
Reactions: shulk3337

shulk3337

macrumors newbie
Original poster
Jul 31, 2017
7
0
I've had no battery issues on any 10.x.x release. If you have a battery issue most cases are down to an app running wild, easily found and dealt with.

I would be more concerned about running an out of date iOS than about any upgrade issues - upgrade issues are RARE. By its very nature problems are massively over-represented on forums because the total forum experience is a tiny proportion of users and almost totally excludes reports from happy users who had no problems.

You have a nasty website/advert, nothing more.
So there are no possibilities of getting malware although I was running an older iOS version, am I right? (Sorry for being annoying, it's just not to worry about having iPhone malware.)
 

Floris

macrumors 68020
Sep 7, 2007
2,381
1,472
Netherlands
In general, people stay on 10.3.1 nowadays because "it's easier to jailbreak" - which is true, but there is a very slim chance of a jailbreak coming out now anyways.
If you want a higher risk of malware, etc. Then jailbreaking is the way to do it.
If you are paranoid about getting malware if you even stick on .1, then don't jailbreak, just upgrade..
 

smorrissey

macrumors 65816
Mar 12, 2015
1,271
502
It's strongly recommended to upgrade to 10.3.3, and there's no reason not to.
Your apps, data, files, etc will all remain working, nothing gets removed or suddenly works different.
You're going from 10.x to 10.x, they're maintenance releases.

The wifi exploit will be abused surely, as everything else. You fix issues you want to have fixed.
Exactly his already on 10.3 it doesn't matter...he should definitely upgrade to 10.3.3.

Being on 9.3.5 that would be a different beast for good or for worst.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.