Enterprise Apps: Bypassing the IOS Gatekeeper
summary
Demonstrates a practical zero-day attack that uses a malicious configuration profile to perform a MITM on MDM traffic, modify wake-up commands and force installation of a malicious enterprise app onto non‑jailbroken iOS devices; MDM-to-device traffic is SSL not pinned so commands can be altered. Real-world data from a 5,000‑device deployment finds 116 enterprise certificates deploying >300 apps (two used for malware); demo installs and runs the app without user trust, and Apple classifies the behavior as a feature.
AI-written summary · about
chapters (13)
- 0:00Introduction to sidesepper
- 1:31iOS security ecosystem
- 3:46Enterprise certificate program
- 6:14Malicious certificate risks
- 9:14Capabilities of rogue apps
- 12:17Third party market misuse
- 14:10Case study: Hacking team
- 17:13MDM communication flaws
- 20:59Man-in-the-middle attacks
- 23:44iOS 9 security changes
- 27:38Demonstration of attack
- 30:44Conclusions and Q&A
- 33:23Technical Q&A
related talks
39mBad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
23mMalicious MDM: Fun with iOS MobileConfigs
48mMobile Device Mismanagement
48mMobile Security Attacks: A Glimpse from the Trenches
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
48mA Practical Attack Against VDI Solutions
27mA Practical Attack Against VDI Solutions
49mHow to Hack Your Own Mobile App