Malicious Video Link Causes iOS Devices to Freeze, Requiring a Hard Reset - MacRumors
Skip to Content

Malicious Video Link Causes iOS Devices to Freeze, Requiring a Hard Reset

by

A malicious video link that when played in Safari causes iOS devices to crash has been discovered this morning.

Playing the MP4 video in question through Safari appears to have no effect at first, but gradually the operating system slows down before it freezes completely, after which only a hard reset will bring the device back to life. YouTube channel EverythingApplePro has posted a demonstration (i.e. not the original video) showing the exploit in action.

iOS safari video crash
The bug appears to affect iOS builds as far back as iOS 5, while iPhones running iOS 10.2 beta 3 are said to power off and show the spinning wheel indefinitely.

If you fall victim to the prank, you'll need to hard reboot to get your device working again. According to a Reddit post by user Riddle, currently the top level domains hosting the video appear to be vk.com and testtrial.site90.net, but bear in mind that the video could be hosted on other sites quite easily and that URL shorteners can mask the actual address you're being linked to.

This kind of prank isn't new. Three years ago, a text exploit made the rounds that caused both Mac and iOS devices to crash.

(Via 9to5Mac.)

Top Rated Comments

124 months ago
On my iPad 2 running iOS 10 this seems to be a feature. Not a problem...
You must have a pretty cool iPad2 if it's running ios10 as my iPad3 stopped being capable of upgrade at ios9!!
Score: 11 Votes (Like | Disagree)
dugbug Avatar
124 months ago
Why is this vulnerability called a prank? Sounds like a remote execution bug like Stage fright on Android.
Where do you see remote execution of code
Score: 5 Votes (Like | Disagree)
keysofanxiety Avatar
124 months ago
soo many bad news for apple..
It's just a software bug and it'll be patched accordingly. Nothing new either.

The bug appears to affect iOS builds as far back as iOS 5
Score: 5 Votes (Like | Disagree)
124 months ago
Doesn't "hard reset" mean erase the device to factory settings? I think this just requires a "hard restart".
The terminology has been essentially corrupted through misuse by more and more over period of time. Kind of like "literally" has even been adjusted to mean the opposite of itself as well for similar reasons.
Score: 4 Votes (Like | Disagree)
124 months ago
Why is this vulnerability called a prank? Sounds like a remote execution bug like Stage fright on Android.
probably because it isn't remote execution at this stage if it only can crash a device
Score: 4 Votes (Like | Disagree)
124 months ago
On my iPad 2 running iOS 10 this seems to be a feature. Not a problem...
Score: 3 Votes (Like | Disagree)

Popular Stories

Apple Event Logo

Apple Just Released a New Accessory

Monday May 4, 2026 8:13 am PDT by
Apple today released a new Pride Edition Sport Loop for the Apple Watch. The band features a rainbow design with 11 colors of woven nylon yarns. The new Pride Edition Sport Loop is available to order now on Apple.com and in the Apple Store app in 40mm, 42mm, and 46mm sizes, and it will be available at Apple Store locations starting later this week. In the U.S., the band costs $49. There...
iOS 26

Apple Says iOS 26.5 Adds Three New Features to Your iPhone

Tuesday May 5, 2026 7:36 am PDT by
iOS 26.5 includes three new features for iPhones, according to Apple's release notes for the update, which is expected to be released next week. As discovered during beta testing, iOS 26.5 enables end-to-end encryption for RCS messaging between iOS and Android devices. Apple says this security upgrade is limited to supported carriers around the world and will continue to roll out....
Instagram Feature 2

PSA: Instagram Encrypted Messaging Ends on Friday, May 8

Tuesday May 5, 2026 8:24 am PDT by
Instagram will remove end-to-end encryption for direct messages between users from May 8, 2026. When the date comes around, Meta will potentially be able to see the contents of all messages between users on the social media platform. Encrypting messages has been an optional feature in Instagram since 2023, but in March of this year the social media platform quietly updated a help page to say ...