[walterbell]

Is your iOS device hardened, e.g. Lockdown Mode, locally supervised by Apple Configurator 2 with restrictive policies, whitelisted WiFi without auto-join, disabled AirDrop, etc? You can also look for forensic artifacts in iOS device backups.

https://docs.mvt.re/en/latest/ios/methodology/

https://www.amnesty.org/en/latest/research/2021/07/forensic-...

https://github.com/citizenlab/malware-indicators

https://github.com/sroberts/awesome-iocs