FireEye security researchers have identified a critical vulnerability in iOS software that could allow keylogging attacks.
To demonstrate the vulnerability, the researchers created a application that records data from users' devices and sends it to a remote server.
«We have created a ‘monitoring’ app for non‑jailbroken devices with iOS 7.0.x. This app can record all touch events in the background, such as screen taps, use of the home button, even use of the volume‑adjustment button. The TouchID fingerprint sensor is no exception. Subsequently, this application can send user events to any remote server».
Despite Apple's attempts to keep iOS 6 and iOS 7 secure through the release of new firmware updates last week, the vulnerability was not addressed and the new OS versions remain vulnerable to hacking attacks.
FireEye emphasizes that this security flaw affects all devices and all iOS versions.
