Researchers publish code to spoof an iPhone restart – Computer – News

Security researchers have published proof-of-concept spoof code for iOS that hides the reboot process. This makes it more difficult for the user to restart the phone, allowing the distributors to keep malware on the device.

Code created by zicops, that proof of concept on github has been set. It’s a Trojan horse that researchers call NoReboot. It is a tool that hides iPhone restart. Researchers say this is interesting for malware distributors, because it means insistence Less speed is needed.

Many types of malware disappear from the phone after restarting it; continuous Malware is more difficult to create, and therefore is rarer and more valuable. Researchers spoof the reboot, making it look like the phone has restarted or turned off but in fact it keeps on working. It’s clearly a parody, not a tampering with the system. So, it’s not an iOS problem that Apple can solve.

The researchers say they can inject code into three daemons that are used on reboot. These are IncallServiceAnd SpringBoard Finally Backboardd. The first is the slider that users see when they try to restart their iPhone using the power and volume buttons. Springboard is an iOS user interface process. By sending a code there, the Trojan can temporarily disable Springboard. As a result, users can no longer provide on-screen inputs.

Finally, Backboardd is addressed. The latter is not necessarily necessary for deception, but is used so that users release the power button beforehand. If they keep it for a long time, the phone will continue to reboot, and the cheat will not work again. This is why the researchers manipulated the Backboard so that a wheel that spins more quickly indicates that the restart process has begun. At the same time, Springboard can be reloaded to look as if all processes have been restarted.

The researchers made a video showing how the process works. During this process, the device’s camera continues to work. Users can of course keep restarting their phones in other ways, so it’s not a foolproof method.