For two years, a handful of websites have indiscriminately hacked thousands of iPhones.