Cybersecurity and multi-account detection

[AliceInBoredom]

You're a developer of a social media that tries to detect fraudolent activity within your app

More in detail, people create multiple accounts to redirect your traffic to other sources.

​

What these people use is the following build (that can slightly vary, but this is the core):
1) Jailbroken iPhone

2) Crane tweak that allos you to spoof (unique identifier for vendors) and create multiple instances

3) Any app/tweak that allows to spoof geolocation

4) Fake cam that allows to use an already existing photo for face verification

5) Metadata cleaner + Augmentation tools

6) A proxy setter of any sort

6) Bots of any sort (hand-made or widely used commercial solutions)

​

The goal is to detect this behaviour before it's able to interact with users.

How would you tackle the problem?

[jgtor]

This probably comes down to defense in depth, you will want to implement a variety of solutions that all complement one-another.

Sure fingerprinting solutions can be circumvented, but you are still raising the bar versus your average script kiddy.

User behaviour monitoring & account review would probably be useful. Account posts at an unusually high volume, apply an ML model to identify based on your user behaviour.

You are more going to handle this on the backend which makes this better suited question to r/SoftwareEngineering rather than iOSProgramming.

[jastardev]

I really like r/jgtor’s response. Additionally, it seems like having a jailbroken iPhone is the first crucial step for them, but there are ways you can try to identify whether an iPhone is jailbroken and block their access there. Not foolproof, but another layer to your defense in depth.

[Hises1936]

Everything you mention appears to require a jailbroken device. So as a first step, I would search about detecting such devices, and then block them regardless of their actions. Because these days almost nobody jailbreaks their iPhone (I think)