Hackers Raid Apple accounts via jail-broken iPhones

Published: 02nd September 2015 11:49 AM  |   Last Updated: 02nd September 2015 11:49 AM   |  A+A-


SAN FRANSISCO: Hackers targeting jail-broken iPhones have raided more than 225,000 Apple accounts, using them for app-buying sprees or to hold phones for ransom, researchers said today.

Jail-broken means modified to run apps not sanctioned by Apple.

"We believe this to be the largest known Apple account theft caused by malware," computer security firm Palo Alto Networks said in an blog post.

An attack using malicious code dubbed "KeyRaider" was discovered by WeipTech, an amateur technical group from Weiphone, described as one of the largest Apple fan websites in China, according to Palo Alto Networks.

In July, WeipTech members began investigating reports that some people's Apple accounts were used to make unauthorized purchases or application installations.

WeipTech worked with Palo Alto Networks to uncover KeyRaider.

KeyRaider is being distributed through Cydia repositories in China but may be affecting users in 18 countries including France, Australia, and the United States, according to Palo Alto Networks.

Cydia repositories are locations where software for jail-broken iPhones can be found and installed.

KeyRaider targets Apple mobile devices that have been jail-broken, or modified to be able to run applications or other software not sanctioned by the California-based maker of iPhones, iPads, and iPods.

While investigating KeyRaider, WeipTech discovered an online server with passwords and other information from more than 225,000 Apple accounts, according to Palo Alto Networks.

The malicious code steals Apple account information by intercepting iTunes traffic and App Store purchase data. It can also be used to thwart users from unlocking iPhones or iPads, according to researchers.

"In addition to stealing Apple accounts to buy apps, KeyRaider also has built-in functionality to hold iOS devices for ransom," Palo Alto Networks said.

"It's important to remember that KeyRaider only impacts jail-broken iOS devices."

Stay up to date on all the latest World news with The New Indian Express App. Download now
(Get the news that matters from New Indian Express on WhatsApp. Click this link and hit 'Click to Subscribe'. Follow the instructions after that.)


Disclaimer : We respect your thoughts and views! But we need to be judicious while moderating your comments. All the comments will be moderated by the newindianexpress.com editorial. Abstain from posting comments that are obscene, defamatory or inflammatory, and do not indulge in personal attacks. Try to avoid outside hyperlinks inside the comment. Help us delete comments that do not follow these guidelines.

The views expressed in comments published on newindianexpress.com are those of the comment writers alone. They do not represent the views or opinions of newindianexpress.com or its staff, nor do they represent the views or opinions of The New Indian Express Group, or any entity of, or affiliated with, The New Indian Express Group. newindianexpress.com reserves the right to take any or all comments down at any time.

flipboard facebook twitter whatsapp