It is good to have a jailbroken iOS device, but it also opens up our device to any hack or malware which can harm our device. Security specialist find a new severe security problem for all jailbroken devices. Basically a new malware known as “KeyRaider” has been discovered on number of jaibroken iPhones, iPads; which intercepts iTunes traffic to grab Apple account info such as ID along with password. It has already stolen more than 250,000 Apple accounts up to now — and here’s how to remove this from your own jailbroken device.
This new malware is found by Palo Alto Networks. This malware seems to have Chinese starting point, but it has effected 18 other countries as well, which is big concern for all jailbreakers around the world. To stop this malware simply install trusted Cydia packages from reliable sources.
KeyRaider iOS Malware: How-To Remove From Jailbroken Device
But if someone already installed some unknown packages and worried about their device, so here’s a fix. The Flu17 on Reddit has given a quick fix to find and remove this new malware app by following these steps.
- Search Cydia for Filza File Manager and install
- Open the app and navigate to /Library/MobileSubstrate/DynamicLibraries/
- Select the first file ending in .dylib
- Inside this file, you’ll see lots of hex code. Use the search bar at the top to look for the following keywords:
- wushidou
- gotoip4
- bamu
- getHanzi
- If you find any of these things, your device is infected. To clean it, you must delete the file along with its corresponding .plist with the same name
“You must perform these steps for each and every .dylib file in the [/DynamicLibraries/] directory,” Flu17 warns. “Once you have cleared out the necessary files, reboot your device. Do not respring. Turn it off fully, then turn it on again.”
Simply reboot your device after you have get rid of all these malicious files which will remove the KeyRaider malware from your jailbroken device. For more security just change your Apple account password because your account is already been compromised.
If your device is effected by KeyRaider malware , then the simple solution is restore your device by installing a fresh and latest iOS firmware to get rid of these malicious files but take backup first. Please keep in mind that this will remove your device jailbreak and erase device data. So you have to jailbreak your device again.
