After installing 100 apps, my iPhone was left idle and unexpectedly connected to Russia

Published:

Cyber Warriors Conclave — nine editions, one cyber safe nation

Investigating iPhone Activity: A Deep Dive into Data and Connections

In a groundbreaking experiment conducted by a technical writer, it was revealed that iPhones are more active in browsing the web by themselves compared to Android phones. The writer installed the top 100 apps from Germany on a factory-reset iPhone SE and left it idle for five consecutive days, monitoring every outgoing connection the device made to external servers.

The results were astonishing – the iPhone generated an impressive 16,542 DNS queries in five days, with an average of 3308 queries per day. The activity peaked around 3 p.m. GMT each day, with a spike in DNS queries during that hour. Surprisingly, the iPhone never contacted servers in China while idle, but it reached out to a server in Russia at least once a day.

The majority of the iPhone’s queries were directed towards Apple servers, with Google and Microsoft also receiving a share. Social network apps like Facebook and TikTok were less active on the iPhone compared to Android, except for Snapchat, which showed constant activity on the iPhone.

The experiment also highlighted the importance of privacy and data protection, as connections to unfriendly countries pose risks of data exposure to authorities or commercial organizations. The Cybernews research team emphasized the need for users to be cautious about the connections their devices make and to limit the number of apps installed to reduce data collection and potential security risks.

Overall, the experiment shed light on the behind-the-scenes activity of iPhones and raised awareness about the implications of constant data connections and queries made by popular apps.

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

OpenAI’s Postmortem Reveals Gaps in Security Oversight Before Hugging Face Hack

Security Oversight Gaps Identified in OpenAI's Postmortem OpenAI's recent postmortem regarding the Hugging Face hack has revealed significant lapses in security oversight prior to the...

Veeam to Showcase Cyber Recovery and AI Solutions at LEAP 2026 in Saudi Arabia

Veeam is set to showcase its advanced cyber recovery and artificial intelligence solutions at LEAP 2026 in Saudi Arabia, marking its sixth consecutive year...

TeamViewer security advisory AV26-852 warns of vulnerabilities across multiple products

Advisory Number: AV26-852Date: August 26, 2026 TeamViewer Vulnerabilities Identified As of August 26, 2026, TeamViewer has reported vulnerabilities affecting several of its products. The affected software...

CrowdStrike Recognized as Strongest Leader in 2026 Frost Radar for Cloud Workload Protection

Adversary-Informed Runtime Protection for Modern Workloads As cyber threats evolve, organizations must adapt their security strategies to...