iOS Trustjacking Attack Exposes iPhones to Remote Hacking

guest · Apr 19, 2018

iOS Trustjacking Attack Exposes iPhones to Remote Hacking
April 18, 2018
https://www.bleepingcomputer.com/ne...ing-attack-exposes-iphones-to-remote-hacking/

Symantec researchers have found a loophole in how iPhone users pair devices with Mac workstations and laptops. They say attackers can exploit this flaw —which they named Trustjacking— to take over devices without the phone owner's knowledge.

At the technical level, the Trustjacking security issue is rooted in the "iTunes Wi-Fi sync" feature included with iTunes.

If this option is enabled in the iTunes settings section, when a Mac laptop/workstation owner syncs a new iPhone to his computer, this feature allows him to connect at any time to the smartphone via the local WiFi network, instead of using a wired cable.

The feature is convenient, and for solid reasons, as it allows a PC owner to easily retrieve or send data from the smartphone via the iTunes app and its API.
Symantec says Trustjacking patch is not complete
Symantec says it notified Apple of the issue, but the solution Apple implemented to address the problem of Trustjacking attacks did not please its researchers.
Click to expand...

Log in or Sign up

iOS Trustjacking Attack Exposes iPhones to Remote Hacking

guest Guest

Log in or Sign up

iOS Trustjacking Attack Exposes iPhones to Remote Hacking

guest Guest

Useful Searches