Has my iPhone 13 been hacked?

My iphone 13 has been hacked.


{"duration_ms":"80815519","share_with_app_devs":0,"roots_installed":0,"bug_type":"145","os_version":"iPhone OS 18.3.1 (22D72)","slice_uuid":"2F007B34-75A8-337F-BC72-C0025987941E","is_first_party":0,"incident_id":"3277217D-1EB8-48B7-A509-C779D1B3E0B4","timestamp":"2025-03-08 08:33:28.00 -0700","app_name":"cfprefsd","name":"cfprefsd"}

Date/Time: 2025-03-07 10:06:24.468 -0700

End time: 2025-03-08 08:33:19.988 -0700

OS Version: iPhone OS 18.3.1 (Build 22D72)

Architecture: arm64e

Report Version: 55

Incident Identifier: 3277217D-1EB8-48B7-A509-C779D1B3E0B4


Data Source: Microstackshots

Shared Cache: E8FE6EF4-4C42-3ADB-85A0-CBB95538E6B5 slid base address 0x1907d8000, slide 0x107d8000


Command: cfprefsd

Path: /usr/sbin/cfprefsd

Resource Coalition: "com.apple.cfprefsd.xpc.daemon"(5996)

Architecture: arm64e

Parent: launchd [1]

PID: 28687


Event: disk writes

Action taken: none

Writes: 1073.75 MB of file backed memory dirtied over 80816 seconds (13.29 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds

Writes limit: 1073.74 MB

Limit duration: 86400s

Writes caused: 1073.75 MB

Writes duration: 80816s

Duration: 80815.52s

Duration Sampled: 80775.85s (event starts 19.63s before samples, event ends 20.03s after samples)

Steps: 4083 (10.49 MB/step)


Hardware model: iPhone14,5

Active cpus: 6

HW page size: 16384

VM page size: 16384


Advisory levels: Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3

Free disk space: 23.79 GB/119.09 GB, low space threshold 150 MB

Low Power Mode: Enabled (for first 79368.0s of samples)

Vnodes Available: 55.92% (11185/20000, 10000 allocated, 10000 soft limit)

Models: none


Preferred User Language: en-US

Country Code: US

Keyboards: com.swiftkey.SwiftKeyApp.Keyboard, en_US QWERTY

OS Cryptex File Extents: 5969


Heaviest stack for the target process:

94 ??? (libsystem_pthread.dylib + 5236) [0x21e0fe474]

94 ??? (libsystem_pthread.dylib + 13952) [0x21e100680]

94 ??? (libdispatch.dylib + 93144) [0x19b13dbd8]

94 ??? (libdispatch.dylib + 95116) [0x19b13e38c]

94 ??? (libdispatch.dylib + 49444) [0x19b133124]

94 ??? (libdispatch.dylib + 46124) [0x19b13242c]

94 ??? (libdispatch.dylib + 106984) [0x19b1411e8]

94 ??? (libdispatch.dylib + 112160) [0x19b142620]

94 ??? (libdispatch.dylib + 29788) [0x19b12e45c]

94 ??? (libdispatch.dylib + 16296) [0x19b12afa8]

94 ??? (CoreFoundation + 636708) [0x193404724]

94 ??? (CoreFoundation + 487580) [0x1933e009c]

94 ??? (CoreFoundation + 337188) [0x1933bb524]

94 ??? (CoreFoundation + 337672) [0x1933bb708]

89 ??? (CoreFoundation + 348444) [0x1933be11c]

89 ??? (CoreFoundation + 348656) [0x1933be1f0]

74 ??? (libsystem_kernel.dylib + 23840) [0x1e4ac4d20]



Powerstats for: cfprefsd [28687]

UUID: 2F007B34-75A8-337F-BC72-C0025987941E

Path: /usr/sbin/cfprefsd

Resource Coalition: 94 samples "com.apple.cfprefsd.xpc.daemon"(5996)

Architecture: arm64e

Parent: launchd [1]

UID: 0

Sudden Term: Tracked

Footprint: 3136 KB -> 3792 KB (+656 KB) (max 6320 KB )

Pageins: 141 pages

Start time: 2025-03-07 12:09:37.849 -0700

End time: 2025-03-08 08:32:59.957 -0700

Num samples: 94 (2%)

Num threads: 89

Primary state: 62 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Default, Override Thread QoS Unspecified, e-core

User Activity: 29 samples Idle, 65 samples Active


[Re-Titled by Moderator]

iPhone 13, iOS 18

Posted on Mar 9, 2025 04:33 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 9, 2025 09:00 AM

Bob Timmons wrote:

Did you notice that the model number of your iPhone in analytics is not the model number of the phone that you have in your hand?


In case this makes the OP even more paranoid, "iPhone14,5" is the internal model identifier corresponding to an iPhone 13. It is not any sort of "proof" that the OP's iPhone is being controlled by the iPhone of a "hacker" who is using an iPhone 14, 14 Plus, 14 Pro, or 14 Pro Max.


That might be all that you need to know about how useful analytics will be to you.


I do not have enough knowledge of iOS internals to figure out things in detail, but it seems that what the OP posted is a crash report for cfprefsd, a background process which helps to read and write preference files. The crash report would be mainly of interest to Apple's iOS developers.


The OP told us that "My iphone 13 has been hacked." without providing any real evidence that it has been.

Similar questions

3 replies
Question marked as Top-ranking reply

Mar 9, 2025 09:00 AM in response to Bob Timmons

Bob Timmons wrote:

Did you notice that the model number of your iPhone in analytics is not the model number of the phone that you have in your hand?


In case this makes the OP even more paranoid, "iPhone14,5" is the internal model identifier corresponding to an iPhone 13. It is not any sort of "proof" that the OP's iPhone is being controlled by the iPhone of a "hacker" who is using an iPhone 14, 14 Plus, 14 Pro, or 14 Pro Max.


That might be all that you need to know about how useful analytics will be to you.


I do not have enough knowledge of iOS internals to figure out things in detail, but it seems that what the OP posted is a crash report for cfprefsd, a background process which helps to read and write preference files. The crash report would be mainly of interest to Apple's iOS developers.


The OP told us that "My iphone 13 has been hacked." without providing any real evidence that it has been.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Has my iPhone 13 been hacked?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.