Thread: Scamware warning

Originally Posted by BradC

Look, I have an iPhone as well, but don't kid yourself. They tend to be "more" secure than most Android devices, but they are still vulnerable to the right malware, it's just the right malware is usually wielded by "higher level actors" who are less likely to use it indiscriminately.

Agree per say

Only approved/certified apps can be loaded unless jailbroken.

These certificates can be instantly withdrawn globally if untoward / un-sanctioned behaviours are detected.

As for what Apple HQ (or Google/Samsung etc in the case of Android) choose to add, that’s a whole thread on its own.

Originally Posted by Tombie

Only approved/certified apps can be loaded unless jailbroken.

Exploits exist, and get used. Sometimes they require clicking on a link, sometimes they don't require any user action at all. Exploits don't care much for the approvals process or policy. Heck it wasn't that long ago you could jailbreak your phone by visiting a web page.

So, yes there are fewer severe exploits for the iDevices on the whole, but they do exist, they are used and they can be deployed in a manner that makes them difficult, if not impossible to detect just the same as on an Android (or pretty much anything ever).

iOS zero-day let SolarWinds hackers compromise fully updated iPhones | Ars Technica
Apple reveals two iOS zero-day vulnerabilities that allow attackers to access fully patched devices
Apple fixes three zero-days, one abused by XCSSET macOS malware
Apple fixes a iOS zero-day vulnerability actively used in attacks

Everyday my parcel is being delivered. I only need to click on the link to track it. It must be so close now.

Originally Posted by ramblingboy42

Everyday my parcel is being delivered. I only need to click on the link to track it. It must be so close now.

Not true, RB! As far as I'm aware, it will be at my place this arvo, if I reply to the message.

Originally Posted by ramblingboy42

Everyday my parcel is being delivered. I only need to click on the link to track it. It must be so close now.

*Yes this one I have been getting for the last 2 weeks.
*It must be infected phones, as if you ring the number, people have no clue.
*Some that I phoned, I let them know there is something on the phone,
*Other I dont bother.

I have a std txt a send along the lines of "sorry i dont click on links sent to my phone"
I send that one to legit deliveries too, Austpost especially.

Legit (if thats a word for them) carriers that send txt links are morons

Originally Posted by DazzaTD5

*Yes this one I have been getting for the last 2 weeks.
*It must be infected phones, as if you ring the number, people have no clue.

It *might* be infected phones, but there are lots of ways of sending a text and faking the caller-id, so the likelihood is the text didn't come from their device at all.

Originally Posted by DazzaTD5

Legit (if thats a word for them) carriers that send txt links are morons

depends on how its done.
SA Health sent me one earlier this week. it didnt come from a random number, it came from "SAHealth" and the nurse let me know it was coming 5min before it arrived.
so it can be done right.

If you click on the link it takes over your phone and sends the message to your contacts, who think it came from you.