iPhone users warned over NoReboot bug which leaves devices vulnerable to hackers – and Apple CAN’T fix it

ALL iPhone users have been warned about a new “ultimate persistence bug” which affects every model – and Apple cannot fix it. The new threat is called “NoReboot” and was discovered by the respected mobile security specialists ZecOps. ZecOps said NoReboot was particularly dangerous because it can stop iPhones affected by even temporary attacks from […]

ALL iPhone users have been warned about a new “ultimate persistence bug” which affects every model – and Apple cannot fix it.

The new threat is called “NoReboot” and was discovered by the respected mobile security specialists ZecOps.

ZecOps said NoReboot was particularly dangerous because it can stop iPhones affected by even temporary attacks from escaping their hacker.

It affects every iPhone model and every version of iOS.

NoReboot is said to trick users into thinking they have switched off or restarted their iPhones.

The bug hijacks the InCallService, SpringBoard and backboardd background processes which handle the reboot process on iPhones, according to a Forbes report.

It shows a fake shutdown or startup sequence when users try to initiate either process.

In reality, the iPhone remains on.

The worrying development is particularly dangerous because it is easier for hackers to access iPhones with “non-persistent” attacks but these are removed when the user shuts down or restarts their phone.

But the damage the hacks can do increases when combined with the NoReboot code because the user cannot rid themselves of the hack.

ZecOps says Apple is unable to prevent an attack because the software itself cannot be patched “because it’s not exploiting any persistence bugs at all – only playing tricks with the human mind.”

Researchers at ZecOps believe the only way the attack can be countered is if Apple built new hardware into its iPhones to show if the phone was really on or off.

This potential new hardware though would only come with new models, meaning millions of iPhones would be vulnerable.

ZecOps recommends forcing a restart if you happen to notice your boot or shutdown sequence is being faked, although most users are unlikely to be able to realise.

It also recommends installing detection tools and following common sense best practises, such as only downloading apps from reliable sources.

The US Sun has contacted Apple for comment.

Getty

The new bug cannot be fixed with a patch, leaving iPhones vulnerable[/caption]