This is an addended post referring to me getting bounced from Bank of America and account shut down and forced to firmware wipe etc my devices due to ‘account takeover’ from ‘malware’ as their crowdstrike or whatever prob read api or ip irregularity? They wouldn’t say, bye this happened to 4 other similar accounts in 6 months. I don’t use proxy or remote etc but the log below apparently reveals some kind of strange activity- I’m not smart enough to put it all together, much appreciated folks!!!
terminusd-471.140.5 pid 674 built on Jun 29 2024 06:58:06, iphoneOS 21G80 "iPhone", packet logging disabled
Companion link is currently enabled on this device 23:35:36.2420 : time of this status dump
--------- NRD Local Device Database Status (0 devices) ---------
--------- Director status --------- Name: Link Director
Enabled: YES
Fixed Interface mode: NO Thermal watcher registered: NO Thermal Pressure: Nominal SOCKS port: 62742
SOCKS server: (null) FD Usage: {
NETPOLICY = 2; Total = 6; VNODE = 4;
}
Unlocked data protection: ClassA
--------- Manager status ---------
Name: Policy Session Manager Policy Session: {
priority = control1
policies = {} }
Installed policies: { "NRLinkDirector-Drop" = (
1 );
}
Name: Link Manager - Bluetooth LinkManager type: Bluetooth State: Ready []
Links: {(
)}
Pipes: {( )}
Peripherals: (null) connectPeripheral invoked: (null) CentralMgr: (null)
PeripheralMgr: (null) currentAdvertisementState: Idle currentAdvertisementRate: Default BT connection state: (null)
Name: Link Manager - WiFi LinkManager type: WiFi State: Ready
Links: {(
)}
WiFi Interface: en0 (index 22) AWDL Interface: (null) (index 0) WiFi Available: NO
WiFi WoW Enabled: NO
WiFi Client Type: 0
Local WiFi Endpoint: (null) Local WiFi Signature: (null) Remote WiFi Endpoints: {
}
Remote WiFi Signature: (null) Remote AWDL EndpointDict: {
}
Available IPv4 addresses: (
)
Available IPv6 addresses: (
)
Available AWDL addresses: (
)
Prefer WiFi asserts: 0
Cleared Prefer WiFi asserts: 0
---- NRIKEv2Listener ---- IKEv2 Listener: (null) Registered links: (null)
Orphaned Device Monitor Connections: {( )}
Orphaned Device Preferences Connections: {(
)}
Ephemeral Device Connections: {(
Sent from my iPhone
Post
Replies
Boosts
Views
Activity
Hi, I’ve had a a rough month with bank of america shuttering my online profile and account because of suspected Device Malware- account takeover it says, and I lost admin privileges to my primary email and Amazon account as well. Figured iOS was unbreachable. I’ve had some odd things happening- remotecloudiu or something caught and stopped in lockdown, and in MC meta showing mdm migration and hidden profiles. Device flickers and crash error 308 repeatedly shows. Avg 40 gb mobile data but last month showed 350 gb. Need some help with analytics or direction.
Payload manifest: bplist00)_OrderedProfiles^HiddenProfiles i_8com.apple.ATT_NR_US.f7eb2f44-daOe-11eb-8349-f45c89abb0d9
mc meta: bplist00Ô_LastMDMMigratedBuild_LastMigratedBuild_&StopFilteringGrandfatheredRestrictions_ AllowedGrandfatheredRestrictionsU21G93Ñ
possible unauth mdm? Sorry I’m clueless!!!