Warning: Malicious Keyboards Targeting iPhone Users via Third-Party Apps

Warning: Malicious Keyboards Targeting iPhone Users via Third-Party Apps Image/Unsplash

VoM News Desk | December 11, 2023 | 09:45 AM IST | Cybersecurity, Mobiles | Follow on Google News

Warning: Malicious Keyboards Targeting iPhone Users via Third-Party Apps Image/Apple

Warning: Malicious Keyboards Targeting iPhone Users via Third-Party Apps

A recent report indicates a potential security threat to iPhone users through third-party keyboards that can clandestinely bypass Apple’s strict security checks, potentially enabling spying activities on user behavior.

Security firm Certo Software has flagged the distribution of third-party keyboards, considered a form of ‘stalkerware’, which surreptitiously spy on users. These keyboards can discreetly monitor and gather sensitive data including messages, passwords, browsing history, and bank credentials once installed on an iPhone.

Exploiting a workaround outside the App Store, hackers are reportedly using Apple’s TestFlight service, typically used for beta testing, to distribute these malicious keyboards. By leveraging this platform, these apps can infiltrate an unsuspecting user’s device, posing a severe privacy threat.

Once installed, these rogue keyboards request permission on the target device to collect user data, violating default iOS settings that restrict keyboard access to the internet. Once enabled, these keyboards stealthily capture and transmit keystrokes, compromising chat messages, passwords, notes, bank credentials, and more. Moreover, these keyboards masquerade as legitimate ones, closely resembling Apple’s default keyboard, complicating their identification on the device.

The collected data can be accessed by the perpetrators via a web portal, potentially compromising the user’s sensitive information.

To protect against these threats, users are advised to check their keyboard settings by navigating to Settings > General > Keyboard > Keyboards. Any unfamiliar or unauthorized keyboards should be swiftly removed by using the ‘Edit’ option.

Further, users should remain vigilant by ensuring the absence of the TestFlight app in their device’s library or settings if they haven’t specifically installed it. Changing device passcodes and seeking online assistance if suspicious of stalkerware on any device, including smartphones or computers, is recommended.

Apple could enhance user safety by implementing notification systems similar to WhatsApp’s new login alerts, providing users with immediate warnings when new keyboards are installed on their devices.

Warning: Malicious Keyboards Targeting iPhone Users via Third-Party Apps: In case of rectification of any error in this Article, Visit on Correction Policy or Register your Query

VoM News Desk

VoM News is an online web portal in jammu Kashmir offers regional, National & global news.