It can only point the device at malicious servers and install malicious certificates.

It can’t replicate itself like a virus or worm, nor can it hide itself from view like a rootkit. The configuration profile can only infect the device in a limited way. RELATED: Not All 'Viruses' Are Viruses: 10 Malware Terms Explained Of course, many computers in the real world are infected because users agree to download and run malicious files. You’re only at risk if you choose to download and install a malicious configuration profile. When the configuration profile is downloaded, iOS will display information about the contents of the profile and ask you if you want to install it. Or, an attacker could set up a phishing site that tries to download a configuration profile file. An attacker could create a phishing email (probably a targeted spear-phishing email) encouraging employees of a corporation to install a malicious configuration profile attached to the email. The most concerning ways are as email attachments and as files on web pages. How Configuration Profiles Could Be InstalledĬonfiguration profiles can be distributed in several different ways.

Install profile on iphone