iOS Malware.

Malicious software targeting Apple iPhones and iPads, including supply-chain attacks on app developers, mercenary spyware, and threats specific to jailbroken devices. It belongs to the Mobile Security category of cybersecurity.

Malicious software targeting Apple iPhones and iPads, including supply-chain attacks on app developers, mercenary spyware, and threats specific to jailbroken devices.

iOS is hardened by code signing, the App Sandbox, Pointer Authentication, BlastDoor, and Lockdown Mode, so most iOS malware needs unusual delivery paths. Documented examples include XcodeGhost (2015), a trojanized version of Apple's Xcode toolchain that injected data-exfiltration code into thousands of apps before they were uploaded to the App Store; KeyRaider (2015), which stole more than 225,000 Apple ID credentials from jailbroken devices; and Pegasus from NSO Group, repeatedly used in zero-click exploit chains against journalists and activists as documented by Citizen Lab and Amnesty International's Security Lab. Apple responds with rapid security updates, BlastDoor and Lockdown Mode mitigations, and threat notifications to potential targets.

Defences for iOS Malware typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: iPhone malware, iOS trojan.