Facebook, Paypal or banking accounts compromised after iOS 9.3.3 jailbreak

If you made 9.3.3 iOS jailbreak, especially using the program PP Helper offered by the Chinese at Pangu, then you might be in the position of becoming victims of hackers from China, or at least that's what a number of users are suggesting who have complained that their Facebook, Paypal, or bank accounts were accessed by unknown persons.

Some of the users report that the accesses were made very shortly after accessing the PP Helper program on their computers, IP addresses from Beijing, Vietnam, Taiwan or various areas of China, being used to access the accounts and, in some cases, to sends money to persons unknown to the account holders.

In the case of Facebook, we are of course talking about accessing accounts and nothing more for now, but for Paypal and banking, money transfers were recorded, and this is practically the biggest problem, because hackers have gained access to payment systems through which they can steal money from innocent users.

PP Helper for Windows is infected with malware

All those who had hacked accounts used the Windows version of the PP Helper program and it is not known whether they used the original version, or another version modified by various hackers and distributed on the Internet, but it is clear that we are talking about a major problem with the method through which jailbreaks for terminals.

When I jailbroken, I downloaded from the Pangus site and I used a throwaway apple login. I have never had a breach like this happen. On July 25th, about an hour after I jailbroke my phone, someone in Beijing accessed my paypal and sent $50 to the email account: novitskvassgs@hotmail.com. Luckily I was awake, and contacted paypal immediately after I received their email and they refunded the transaction. They confirmed my account was accessed from Beijing.

Speaking about the problem, Cydia creator saurik said that he trusts Pangu, but he cannot certify that the jailbreak program in China was not modified by a third party after the hackers published it, so there is a chance that everyone who used this program PP Helper in Windows to be infected with malware.

The problem is with the company 25PP, which finances these jailbreak solutions, their employees may include malware in these programs, or their servers may be compromised by other hackers who include malware, and in the end millions upon millions of people could have their computers infected by a Chinese malware.

I don't particularly like the concept of installing the 25PP tool as Chinese companies tend to have software that is pretty intrusive and even "combative" against competitor's software, and in general I am concerned about the way people do signature stuff which is why I worked so hard to make Impactor be able to do all the signing and communication locally.

Those from 25PP are known for the fact that they include a "surprise" in the software sold worldwide for users, so it would not be excluded that in this situation there would be very big problems.

The only safe solution

According to saurik, the only safe method by which we can jailbreak iOS 9.3.3 and rest assured that our computers will not be compromised, is to use jailbreak tutorial with Cydia Impactor, the creator of Cydia stating that the English version of the PP jailbreak application would have been made only by Pangu, without being touched.

Moreover, the Cydia Impactor application asks to log in with an Apple ID, but saurik is more serious than the rest and theoretically should not receive the log data, but of course it is advisable to use an Apple ID that you do not normally use normal for connecting to Apple services.

I will also say I trust Pangu a lot... but I don't know if the Chinese version of their app was only touched by them. I bet the English one was their work only, although you are downloading it from 25PP, which opens some issues: do you trust the employees at 25PP with control over their servers? I would say that it would be dumb to do quickly be trying to attack people rather than racking up more credentials before anyone becomes suspicious.

I have always told you that the jailbreak solutions released by the Chinese are dubious and can hide "surprises" that could generate serious problems in the long term, and unfortunately in the case of iOS 9.3.3 jailbreak I was proved right.