Massive security fail by Apple allowed total remote control of iPhones via WiFi

guest · Dec 2, 2020

Massive security fail by Apple allowed total remote control of iPhones via WiFi
No interaction needed. Over the air.
December 2, 2020
https://9to5mac.com/2020/12/02/remote-control-of-iphones-security-fail/

A massive security failing by Apple allowed an attacker to take total remote control of iPhones within WiFi range. They would be able to download all the data on the phone, and even activate the iPhone’s cameras and microphones to provide real-time spying capabilities.

The vulnerability was not just a theoretical risk: a noted Google security researcher was able to demonstrate the capabilities by taking full remote control of an iPhone in another room …
The jaw-dropping exploit was demonstrated by Google Project Zero security researcher Ian Beer.
Click to expand...

Project Zero founder Chris Evans told ArsTechnica that the scary thing about this one is that it works without any user interaction at all, and leaves no clue that their privacy was violated.

This attack is just you’re walking along, the phone is in your pocket, and over Wi-Fi someone just worms in with some dodgy Wi-Fi packets.
Beer’s blog post explaining how the vulnerability arose, and how he was able to discover and exploit it, is a lengthy and technical one. The story began in 2018.
Click to expand...

guest · Dec 4, 2020

‘Scariest iPhone Hack Ever’ Illustrates Importance of Protecting Mobile Devices
December 4, 2020
https://blog.zimperium.com/scariest...ates-importance-of-protecting-mobile-devices/

It’s been called the ‘scariest iPhone hack ever.’ According to a recent Ars Technica article, “Earlier this year, Apple patched one of the most breathtaking iPhone vulnerabilities ever: a memory corruption bug in the iOS kernel that gave attackers remote access to the entire device – over Wi-Fi, with no user interaction required at all. Oh, and exploits were wormable – meaning radio-proximity exploits could spread from one nearby device to another, once again, with no user interaction needed.”

The BBC reports the hack was possible because Apple’s devices use a technology called Apple Wireless Direct Link.
Click to expand...

Mobile threats are scary, real and here to stay
Ian writes,

“The takeaway from this project should not be: no one will spend six months of their life just to hack my phone, I’m fine. Instead, it should be: one person, working alone in their bedroom, was able to build a capability which would allow them to seriously compromise iPhone users they’d come into close contact with.”
The reality is, paid professionals with time and resources are taking advantage of vulnerabilities, developing malicious apps, creating phishing campaigns and more, all in the name of stealing data, passwords, information and intelligence all found on mobile devices.

As of September, we had already recorded more mobile app breaches, failures, and data leaks than all of 2019.
Click to expand...

Log in or Sign up

Massive security fail by Apple allowed total remote control of iPhones via WiFi

guest Guest

guest Guest

Log in or Sign up

Massive security fail by Apple allowed total remote control of iPhones via WiFi

guest Guest

guest Guest

Useful Searches