iOS Trustjacking: Trust Has a Price
summary
A new attack called iOS Trustjacking claims a one-time tap on the “Trust” dialog lets an attacker keep persistent, remote control by exposing USB services over the network. The research uses libimobiledevice, ports USBMUX over TCP and spoofs mDNS/Bonjour or a VPN tunnel to reach devices, installs a developer disk image to take live screenshots, extracts messages and media from the backup manifest.db, and hot‑sideloads repackaged apps in under a second. USB Restricted Mode does not stop it; resetting trusted computers and using encrypted backups mitigates risk.
AI-written summary · about
chapters (13)
- 0:00Start
- 4:28Usb Daemon
- 5:38Previous Attacks
- 7:28Video Jacking
- 9:11Itunes Wi-Fi Sync
- 17:07Backup Command
- 21:44Sqlite Database
- 33:48Restricted Mode
- 37:59Vpn Tunnel
- 40:14Concrete Mitigations
- 40:40Clear the Trusted Computer Settings
- 41:10Reset All the Privacy Settings
- 45:10Questions
related talks
42mDiscovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
37mEnterprise Apps: Bypassing the IOS Gatekeeper
44mCan You Trust Me Now? An Exploration Into the Mobile Threat Landscape
48mMobile Security Attacks: A Glimpse from the Trenches
23mMalicious MDM: Fun with iOS MobileConfigs
48mA Practical Attack Against VDI Solutions
36mStealing user’s identity
49mContain Yourself: Building Secure Containers for Mobile Devices