Recently, we’ve noticed some sysdiagnose submissions from users with jailbroken devices running tools like Dopamine and Frida. While these tools can be valuable for security research, we strongly advise against using a jailbroken device for daily personal activities.
In addition to the inherent risks of jailbreaking, these devices are running outdated iOS versions with numerous unpatched vulnerabilities. For the highest level of security, it’s crucial to always keep your device updated to the latest version of iOS.
Dopamine and Frida-related processes are flagged as anomalies in our system because we deliberately exclude them from our baseline of what constitutes a non-compromised device. However, we do not issue warnings about their presence for two key reasons:
- They Are User-Installed: Unlike spyware, these tools are intentionally installed by the user and are not covert.
- They Are Obvious: Their presence is easily detectable and does not operate in the same hidden manner as spyware.
If the anomalies differ from what is expected though, such as spyware attempting to look like it is Frida or Dopamine, then it would still qualify as an anomaly of concern. Any anomalies our automated system detects are triaged for manual review by our team of mobile cyber security experts. If this manual review detects something concerning, then we email the user as well as send an alert in the app.
If you’re running a jailbroken device, consider limiting its use to research or testing purposes only. For personal use, we highly recommend a non-jailbroken device running the latest iOS version to ensure optimal security and protection from potential threats.