A Swiss iPhone developer has released a new application that is capable of harvesting huge amounts of personal data from iPhones, including geolocation data, passwords, address book entries and email account information. The application, called SpyPhone, uses the public iPhone API that Apple made available for application developers. It does not need any exploits or hardware attacks in order to access the iPhone s data. Instead, SpyPhone relies on using the iPhone’s usability and depth of features to its advantage. SpyPhone can be set to email reports on each infected phone back to the attacker.
Source: https://threatpost.com/spyphone-iphone-app-can-harvest-personal-data-120409/73211/