Airmail 3 Exploit Instantly Steals Info from Apple Users

guest · Aug 22, 2018

Airmail 3 Exploit Instantly Steals Info from Apple Users
August 21, 2018
https://threatpost.com/airmail-3-exploit-instantly-steals-info-from-apple-users/136737/

Severe vulnerabilities in the Airmail 3 software – an alternative to Apple Mail for MacOS – would allow a remote attacker to steal a user’s past emails and file attachments, in many cases without requiring user interaction beyond simply opening a weaponized message.

An attacker would simply send an email to an Airmail 3 user containing a link with a URL request that triggers the “send mail” function of the application. Unbeknownst to the user, if clicked, this link opens up and sends a new email message from the victim account to the attacker.

Worse, the research team also found out they were also able to bypass Airmail’s HTML filters part of the time, to trigger the exploit instantly.
[...] technical writeup
Click to expand...

Rasheed187 · Aug 25, 2018

Pretty major bug, perhaps a good reminder not to rely on email-clients.

Log in or Sign up

Airmail 3 Exploit Instantly Steals Info from Apple Users

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Airmail 3 Exploit Instantly Steals Info from Apple Users

guest Guest

Rasheed187 Registered Member

Useful Searches