I wonder what triggered him to suspect he was hacked then. Since presumably something triggered him to have his phone forensically investigated.

Not saying this is likely. Just another possibility.

Have you seen notifications on iOS? There are even notifications for the notifications.

But this type of notification I believe is delivered via iMessage and email. So unless you’re actively using iMessage or your icloud email then chances are all this is practically invisible.

So in other words he probably speaks about security, whatever his staffers feed him, but most likely has no clue whatsoever what it's about.

Then again, you’d think that’s the kinda thing malware developers would spend some time learning to hide from the user.

>A Threat Notification is displayed at the top of the page after the user signs into account.apple.com.

>Apple sends an email and iMessage notification to the email addresses and phone numbers associated with the user’s Apple Account.

You can see what it looks like in https://reddit.com/r/iphone/comments/1c10jai/i_have_received...

I wonder how they detect it, is it for known IOCs that they've already found elsewhere, or do they have heuristic detection that flags things that might need further investigation.

It isn’t hard to accidentally dismiss one then wonder what it was. Why there isn’t there an interface for looking back?

Edit: below it says there are emails and notices on web login.

I think the proof of Apple’s level of care is in their lack of attention to this issue.

Ephemeral transit layer owned by third-parties constantly,

vs

cold storage of secrets your architecture owns from start to finish.

This is a good description of SMS and RCS.

or a car,

or your off-brand earbuds.

Oh wait this is apple, they always know whats best for the user and do the choices for them, even when wrong. So all is as expected