Ask Need: malicious

Apps can track keystrokes becz of iphone security hole

<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody>
<tr><td style="text-align: center;"><img border="0" height="308" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLoFddt75vXY77eew3cWeI1z2L580x_M7HO0Gy89ZlB1j4qJYswMhPSnxAr7L8AGa9Ehg0FDaGkFj_mvi9z5w9A8eEIDoNrFyBx16t7yW3NrWkiCu-FOmnmndQtV__8XqzDlVWEZJyYS4/s1600/2014-02-25_15-37-01.png" width="320" /></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Apps can track keystrokes becz iphone security hloe</td></tr>
</tbody></table>
It's been only days since Apple fixed the wide spread <a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank">iOS</a> security flaw that made <a href="https://www.blogger.com/null" target="_blank">headlines</a>, and now <a href="https://www.blogger.com/null" target="_blank">another issue</a> has surfaced. A network security company has spotted another hole that is allowing malicious software to watch your every move.
<br />
Security firm<a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank"> FireEye</a> spotted the issue and was able to get a dummy app
 onto the App Store to prove it, a technique many security groups use as
 proof of concept. The particular security flaw at hand, which is 
present on the newest version of <a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank">iOS</a>, allows for apps to track your 
keystrokes made possible by<a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank"> iOS</a> 7's multitasking features. The process 
will track your moves while running as a background process, potentially
 without the users knowledge.<br />
FireEye explained its proof of concept app further saying this 
"monitoring app can record all the user touch/press events in the 
background, including touches on the screen, home button press, volume 
button press and TouchID press, and then this app can send all user 
events to any remote server," the company explained. It goes on to say 
that it was able to exploit this vulnerability on<a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank"> iOS</a> 7.0.4 as well as<a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank"> 
iOS</a> 7.0.5, 7.0.6 and 6.1.x.<br />
Fortunately from the sounds of it, this security flaw can only be 
exploited when you download something you shouldn't. While we are 
waiting for <a href="http://askneed.blogspot.com/2014/02/apps-can-track-keystrokes-becz-iphone.html" target="_blank">Apple</a> to patch things up, reports say that even if something
 does hit your system in this way, it can be easily rectified by paying 
close attention to your background processes and then ditching anything 
shady.