Why not just keep the device off and stop using it? That would stop all attacks!

Normally bugs in these types of attacks target daemons that are always connected even if not logged onto iMessage or even if you disable iMessage. Or at least this was the case with previously known bugs.