CyberCertPrepMobile Security FundamentalsMobile OS ArchitectureMEDIUMFree question
Scenario
An iOS security researcher uses the 'iproxy' tool over USB to forward local ports and then runs a dynamic analysis framework against a test iPhone running a developer-signed app.
What iOS security feature allows apps signed with a developer certificate to run on a physical device, and why can this be abused in attack scenarios?
- A.Developer provisioning profiles allow apps signed with a developer certificate and bound to specific device UDIDs to bypass the App Store review; threat actors abuse this via enterprise/developer certificates to distribute malware outside the App Store
- B.The developer certificate bypasses the Secure Enclave key attestation check, allowing unsigned code to execute if the developer profile is trusted
- C.Developer-signed apps run in an unrestricted sandbox without TCC prompts, allowing them to access any user data
- D.The developer certificate enables JIT compilation for any app, which is otherwise only available to Safari
Why A is correct