A team of experts from the University of Darmstadt in Germany found a vulnerability in Apple smartphones. With its help, attackers can run malicious code even when the device is turned off.

The methodology is based on low power consumption mode (LPM). While inside, the iPhone is actually turned off. But at the same time, some chips continue to work.

This is necessary for Apple Pay cards to work and for users to detect the device in vanishing mode.

And as it turns out, in this case, the iPhone continues to actively transmit data over an unsecured channel. In theory, this ensures that a correctly written virus remains active even if the device is turned off.

Interestingly, the scientists shared their findings with Apple, but the company’s engineers did not respond to their comments.