(adsbygoogle = window.adsbygoogle || []).push({}); There's a new malware threat that sends your Apple ID username and password to some Chinese server. It's called Unflod.dylib, which is a rouge Mobile Substrate extension that scans all outgoing SSL connections on a Jailbroken device. No one exactly knows how it is infecting devices yet, but most suspect pirate repos. Now, to check if you're infected use ifile and browse to /Library/MobileSubstrate/DynamicLibraries/ and look for Unflod.dylib + Unflod.plist and delete them both! I'd highly suggest changing your Apple ID password if you find it! Honestly, this seems pretty big, so keep an eye out for anything odd going on with your Apple ID. If you wanna read more about it and see exactly how it works read this breakdown: You must login or register to view this content.

I'm safe, but thanks for the warning!

You may not have Unflod.dylib or Unflod.plist but you could still be infected. You should also check for Framework.dylib and Framework.plist, if you have these you need to delete these as well.

A tweak has been submitted to the Bigboss repo that removes these. Unflod Remover

This has been posted here already :p
You must login or register to view this content.

I don't use the general discussion forum so I would have never seen that.

It should of been posted here really imo

Yeah I think he did that because there isn't very much people who view the mobile thread