VERY IMPORTANT

While monitoring the network traffic of a corporate Wi-Fi network dedicated for mobile devices, researchers noticed suspicious activity that originated from several iOS-based phones. Since it is impossible to inspect modern iOS devices from the inside, offline backups of the devices in question were created, inspected using the Mobile Verification Toolkit’s mvt-ios. This led to the discovery traces of compromise.