New iOS Keylogging Vulnerability Discovered

[wraggster]

"Following hot on the heels of the iOS (and OS X) SSL security bug comes the latest vulnerability (http://www.fireeye.com/blog/technical/2014/02/background-monitoring-on-non-jailbroken-ios-7-devices-and-a-mitigation.html) in Apple's mobile operating system. It is a security bug that can be used as a vector for malware to capture touch screen, volume rocker, home button and (on supported devices) TouchID sensor presses, information that could be sent to a remote server to re-create the user's actions. The vulnerability exists in even the most recent versions of iOS and the authors claim that they delivered a proof-of-concept monitoring app through the App Store (http://arstechnica.com/security/2014/02/new-ios-flaw-makes-devices-susceptible-to-covert-keylogging-researchers-say/)."

http://it.slashdot.org/story/14/02/25/1817230/new-ios-keylogging-vulnerability-discovered