Apple’s green and orange privacy dots alert users when their camera or microphone activates. However, new research shows those indicators can disappear if a device suffers deep system compromise.
Security experts at Jamf discovered that Predator spyware can suppress these alerts. Importantly, the attack does not exploit a new iOS bug. Instead, it works only after hackers gain kernel-level access to the device.
That distinction matters. The spyware does not bypass iOS protections under normal conditions. It operates only when attackers already control the system.
How Predator Silences the Warning Dots
On iPhone, apps cannot hide recording indicators. When the camera or microphone activates, iOS sends a signal to SpringBoard, the system process that manages the status bar.
Predator interferes with that process. It injects code directly into SpringBoard and intercepts sensor activity updates before they reach the user interface. As a result, the familiar green or orange dot never appears.
Technically, the spyware hooks a single SpringBoard method responsible for handling sensor changes. When triggered, it nullifies the message, causing the system to discard it quietly. Because iOS routes camera and microphone alerts through the same internal pipeline, one hook suppresses both indicators at once.
Meanwhile, the phone continues to function normally. Apps open, notifications arrive, and the interface behaves as expected. Therefore, users may never notice that recording occurs in the background.
Why This Threat Targets Specific Users
Predator falls into the category of commercial spyware. It typically relies on zero-day exploits or highly targeted attack chains to achieve full system access.
For most iPhone owners, this remains an unlikely scenario. Still, experts recommend keeping iOS updated, restarting devices periodically, and enabling Lockdown Mode if facing higher risk.
Ultimately, privacy indicators still protect everyday users. However, the research highlights an important reality: once attackers gain deep system control, even trusted visual safeguards can fail.
