Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Apple sues virtualization firm Corellium for selling iOS and iTunes knockoffs

Last updated

Apple on Thursday filed a lawsuit claiming software virtualization firm Corellium, which markets its wares to security researchers, infringes on copyrights covering iOS, iTunes and other Apple assets.

Filed with the U.S. District Court for the Southern District of Florida, Apple's complaint takes issue with Corellium's mobile device virtualization solution, a product the tech giant claims infringes on various software copyrights. Apple says the suit is a "straightforward case of infringement of highly valuable copyrighted works."

"[ ... ] Corellium has simply copied everything: the code, the graphical user interface, the icons— all of it, in exacting detail," the filing reads.

Corellium in its marketing materials advertises its virtualization product as a tool for developers ferreting out bugs, flaws and other vulnerabilities in software and hardware. Available on the web or as a $1 million-per-year "private" local installation, certain solutions present virtual versions of iOS devices running what Apple calls unauthorized copies of iOS.

Corellium itself touts the exacting detail of its product line. As noted in the filing, the firm recently presented its CORSEC product at the Black Hat conference in August, saying the software runs "real iOS — with real bugs that have real exploits."

Apple does not license iOS, iTunes or its user interface technologies for use by Corellium.

The firm's tools enable users to create a virtual iOS device in the cloud. Customers first select a device to copy — support includes iPads and current iPhone XR, XS and XS Max models — then are asked to download a particular iOS build directly from Apple's servers. Corellium's platform subsequently displays a "fully functioning" replica device.

As users are able to make multiple copies of a virtual device and its underlying software, Apple believes Corellium's servers are illegally hosting numerous copies of iOS. Alleged infringement also includes iTunes.

The company does not appear to make efforts to limit its products to research and testing, nor does it require users to disclose discovered vulnerabilities to Apple, the filing notes.

Apple asserts two claims of direct federal copyright infringement for computer software and graphical user interface elements, and one claim for contributory federal copyright infringement targeting users of Corellium's products.

Apple seeks an injunction that prohibits sale and access to Corellium products, an order to return owned intellectual property, destruction or impounding of infringing materials, damages and court fees.



12 Comments

taugust04_ai 8 Years · 106 comments

This doesn’t look good for Corellium. Looks like Apple has drawn a line in the sand on what third party tools it will allow to “crack” iOS devices.

AppleExposed 6 Years · 1805 comments

Android and GooglePlay next.

Then Huaweis knockoff Apple Stores and knockoff Airpods.

(I wish)

macxpress 16 Years · 5913 comments


I'm confused by this part:

Customers first select a device to copy — support includes iPads and current iPhone XR, XS and XS Max models — then are asked to download a particular iOS build directly from Apple's servers. Corellium's platform subsequently displays a "fully functioning" replica device. 

How are these iOS builds available directly from Apple's servers without authorization? Are they using developer credentials of some form?

You can directly download iOS from Apple servers if you know the direct URL. Here are the ones for iOS 12.4 for example: http://osxdaily.com/2019/07/22/ios-12-4-update-for-iphone-ipad-available-to-download-ipsw-links/

DAalseth 6 Years · 3067 comments


I'm confused by this part:

Customers first select a device to copy — support includes iPads and current iPhone XR, XS and XS Max models — then are asked to download a particular iOS build directly from Apple's servers. Corellium's platform subsequently displays a "fully functioning" replica device. 

How are these iOS builds available directly from Apple's servers without authorization? Are they using developer credentials of some form?

Just a guess on my part mind you... But I suspect that by emulating a real iOS device, they set it up to make Apple's servers think it was a legitimate device looking for a software update, or even being factory reset.