Su-A-Cyder: Homebrewing Malware for IOS Like a BO$$!
summary
Tool su-A-Cyder automatically repackages an existing IPA, injects a DYLIB built with Theos+fastlane, signs it via Xcode 7’s Apple ID flow and installs it on a non‑jailbroken iOS 9.2.1 device. Demoed as an evil Skype that runs, hides its icon with a SpringBoard folder glitch and opens the real app, it can access GPS, contacts, photos, microphone and HealthKit (but not Apple Pay or push). The pipeline works end‑to‑end in the presentation.
AI-written summary · about
chapters (7)
- 0:00iOS malware threats
- 24:09iOS sandbox rules
- 1:00:00Apple policy changes
- 1:31:58Historical iOS malware
- 2:03:33Personal targeting malware
- 2:22:16Homebrew certificates impact
- 2:31:58Detection strategies
related talks
58mUncovering OWASP’s Mobile Risks in iOS Apps
36mTesting iOS Apps without Jailbreak in 2018
49mHow to Hack Your Own Mobile App
36mStealing user’s identity
40mStealing User's Identity
47mSecurity Threats & Mitigations for iOS Developers
44mExploiting Unpatched iOS Vulnerabilities for Fun and Profit
47mBASHing iOS Applications