IBM Warns of Apple Siri Shortcut Scareware Risk

guest · Jan 31, 2019

IBM Warns of Apple Siri Shortcut Scareware Risk
January 31, 2019
https://www.eweek.com/security/ibm-warns-of-apple-siri-shortcut-scareware-risk

In a proof of concept Siri Shortcuts scareware attack developed by IBM, a malicious shortcut is able to read information from an IOS device, and then demand a fee from the user, all with the native Siri voice.

"IBM X-Force conducted all of the research using native functionality of the Shortcuts app, so no exploitation of vulnerabilities was needed," Kuhn said. "We highly suggest that every user reviews Shortcuts before adding them to their devices."
Kuhn explained that the user must install Siri Shortcuts app as well as the malicious shortcut. However, he noted that attackers could easily entice users to do so by socially engineering the intended victim.

So what should Apple users do? IBM suggests that users be careful when downloading third party Siri Shortcuts and only install from a trusted source. IBM also suggests that users be mindful when running a Siri Shortcut and only enable actions that are needed.
Click to expand...

Log in or Sign up

IBM Warns of Apple Siri Shortcut Scareware Risk

guest Guest

Log in or Sign up

IBM Warns of Apple Siri Shortcut Scareware Risk

guest Guest

Useful Searches