New iOS Video Injection Tool Bypasses Biometric Locks on Jailbroken iPhones

A newly discovered video injection toolkit for iOS devices that have been jailbroken can circumvent biometric checks and even exploit services lacking biometric safeguards. Developed to run on iOS 15 or later, the toolkit uses a remote presentation transfer mechanism (RPTM) to connect a computer with the compromised device and inject pre-crafted deepfake video directly into the device’s video data stream.

The resulting footage can include face swaps or motion re-enactments, and is streamed into the application’s video input rather than the physical camera, deceiving verification processes into treating the deepfake as a real-time feed. This allows a fraudster to impersonate a legitimate user or fabricate a synthetic identity, effectively bypassing locks that rely on facial or liveness checks, with suspected origins traced to sources in China.

According to iProov, Andrew Newell, Chief Scientific Officer at iProov, warns that this marks a significant breakthrough in identity fraud and underscores the need for rapid adoption of multilayered, live-verification defenses.