Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens for the clue delivery of Langge! CTOnews.com Sept. 23, developer opa334 recently tweeted that users are not recommended to upgrade to iOS 17.0.1 hand 16.7 update, suggesting that troll 2.0 is about to be released.

CTOnews.com Note: troll, whose English name is TrollStore, is a permanently signed non-jailbreak App that allows users to install unsigned IPA files on iPhone without jailbreaking.

Trolls mainly take advantage of the signature vulnerability called AMFI / CoreTrust certificate, which can not verify whether the system root certificate is legal, which is known to exist in iOS 14.0-iOS 15.4.1.

Developer opa334 developer first sent a tweet mocking that Apple has just fixed the vulnerability needed for "TrollStore 2: Electric Boogaloo"? It quickly attracted the attention of netizens, and the tweet has been viewed more than 82000 times.

Apple fixed a vulnerability in iOS 17.0.1 and iOS 16.7 with tracking number CVE-2023-41991 that allows malware to bypass signature verification.

CTOnews.com translated his tweet as follows:

What I want to say is, please avoid upgrading to iOS 17.0.1 and iOS 16.7 updates, and please don't cry to me in the future after the upgrade.

This CVE tracking vulnerability is similar to the CoreTrust vulnerability, but I am skeptical about using it to bring TrollStore back.

The method used in GTA Car Tracker has been fixed, and in my understanding, I don't know anything else that doesn't need to bypass PPL.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.