Apple's Beats brand in April unveiled the Powerbeats Pro, a redesigned wire-free version of its popular fitness-oriented Powerbeats earbuds.
iOS Device Ransom Attacks Continue to Target Users in U.S. and Europe
A few years ago, a number of users in Australia were victimized by attackers remotely locking iPhones, iPads, and Macs using Find My iPhone on iCloud. Compromised devices typically displayed Russian ransom messages demanding payments of around $50 to $100 for the device to be unlocked.
A ransom message targeting a Mac in 2014 with the common pseudonym "Oleg Pliss"
At the time, IT security expert Troy Hunt noted that the attackers were likely using compromised emails and passwords exposed from various online security breaches to log in to iCloud accounts. AOL and eBay, for example, were among several high-profile companies that suffered data breaches in 2014.
Apple later confirmed that iCloud was not compromised, and that the eventually-arrested attackers had instead gained access to Apple IDs and passwords through external sources. Russian website MKRU said the attackers obtained the credentials via phishing pages and social engineering techniques.
Since then, CSO security blog Salted Hash has discovered that, since at least February of this year, these ransom attacks have returned and now target users in the U.S. and Europe. The methods used by attackers are said to be the same ones used in 2014, starting with a compromised Apple ID.
Given that the Apple ID credentials involved in the ransom attacks are believed to originate from online security breaches, Salted Hash pointed towards a recently compromised Mac-Forums.com database, which allegedly includes 291,214 accounts, being sold for around $775 on the darknet.
There is currently no evidence to suggest that the Mac-Forums database has any relation to these ransom attacks, but users with an account on that website should change their passwords out of an abundance of caution. Setting a device passcode and enabling two-factor authentication for your Apple ID is also highly recommended.
Apple has a support document outlining steps to take if you think your Apple ID has been compromised. Also read security and your Apple ID.
At the time, IT security expert Troy Hunt noted that the attackers were likely using compromised emails and passwords exposed from various online security breaches to log in to iCloud accounts. AOL and eBay, for example, were among several high-profile companies that suffered data breaches in 2014.
Apple later confirmed that iCloud was not compromised, and that the eventually-arrested attackers had instead gained access to Apple IDs and passwords through external sources. Russian website MKRU said the attackers obtained the credentials via phishing pages and social engineering techniques.
Since then, CSO security blog Salted Hash has discovered that, since at least February of this year, these ransom attacks have returned and now target users in the U.S. and Europe. The methods used by attackers are said to be the same ones used in 2014, starting with a compromised Apple ID.
It starts with a compromised Apple ID. From there, the attacker uses Find My iPhone and places the victim's device into lost mode. At this point, they can lock the device, post a message to the lock screen and trigger a sound to play, drawing attention to it.The website shared screenshots and linked to a number of Facebook, Twitter, and Reddit users whose devices appear to have been held for ransom in recent months, but there is speculation that the problem could be much larger than that. The following excerpt is highly questionable, however, and could very likely be incorrect.
In each of the cases reported publicly, the ransom demanded is usually $30 to $50. If a victim contacts the referenced email address, in addition to payment instructions, they're told they have 12 hours to comply or their data will be deleted.
Earlier this week, a security professional posted a message to a private email group requesting information related a possible compromise of at least 40 million iCloud accounts.The report adds that "for now, let's assume there hasn't been a massive iCloud data breach." Apple has not commented on the matter.
Salted Hash started digging around on this story after the email came to our attention. In it, a list member questioned the others about a rumor concerning "rumblings of a massive (40 million) data breach at Apple."
The message goes on to state that the alleged breach was conducted by a Russian actor, and vector "seems to be via iCloud to the 'locate device' feature, and is then locking the device and asking for money."
Given that the Apple ID credentials involved in the ransom attacks are believed to originate from online security breaches, Salted Hash pointed towards a recently compromised Mac-Forums.com database, which allegedly includes 291,214 accounts, being sold for around $775 on the darknet.
There is currently no evidence to suggest that the Mac-Forums database has any relation to these ransom attacks, but users with an account on that website should change their passwords out of an abundance of caution. Setting a device passcode and enabling two-factor authentication for your Apple ID is also highly recommended.
Apple has a support document outlining steps to take if you think your Apple ID has been compromised. Also read security and your Apple ID.
[ 144 comments ]
Top Rated Comments
(View all)
39 months ago
Apple under Tim Cook is slipping...
WTF? That comment doesn't make any sense here.
39 months ago
Apple under Tim Cook is slipping...
Reading comprehension is slipping faster, apparently.
39 months ago
Apple under Tim Cook is slipping...
Apple is responsible for third party security breaches? Really now.I've got an idea! Let's start reading articles instead of making baseless comments after glancing at a headline. Deal?
39 months ago
Apple under Tim Cook is slipping...
What does Tim Cook have to do with people using weak passwords, using the same passwords between accounts, not changing them regularly, ect. ?
39 months ago
This sort of thing makes me wonder why companies have not latched on more vigorously to things like touchID. I can not just impersonate that over the phone in a far off land. I have to get into your secure enclave or have your physical phone. This is the direction everything needs to go.
39 months ago
Apple better start innovating the hackers...
No amount of innovation can fix human stupidity.
39 months ago
For example. I purchase my iPhone , buy it outright, why must I be forced to own a Mac to activate it and have an Apple ID?
You aren't. Just use a trusted phone number to receive the verification SMS text or phone call with the code.
39 months ago
Until world governments update their laws to throw the book at ANY hacker, and users smarten up and start using passwords other than "password", this kind of crap will continue.
I know, neither thing will ever happen, and I'm just being an optimist...
I know, neither thing will ever happen, and I'm just being an optimist...
39 months ago
Apple under Tim Cook is slipping...
Apple as a company has been growing at a ludicrously fast rate for the past few years. The bigger you get, ths greater the number more of bad people out there want to take you down. Apple is still the most prolific company out of them all who proactively fixes security issues as fast as they can and make further improvements.So, to fix your statement: Apple under Tim Cook has grown significantly and must now work harder to uphold the security standards they're known for. But at least they're still trying.
[ Read All Comments ]
Satechi, known for its line of accessories for Apple's iOS and Mac devices, today announced the launch of its first HomeKit product, the Dual Smart Outlet.
Priced at $60, the Dual Smart...
Kanex today announced the launch of its iAdapt Multiport Docking Station for the 2018 iPad Pro models, designed to add a range of additional ports to the devices using the built-in USB-C port.
...
Microsoft has released a native Mac version of its To-Do app for the first time, meaning macOS users will no longer have to rely on company's the web app to access the to-do list service.
...
Apple appears to be continuing its recent trend of making app subscriptions more transparent and manageable, as evidenced by another change discovered in the latest developer beta of iOS 13. When you...
Belkin today announced that its InvisiGlass Ultra Front and Back Protection for the latest iPhone models is now available for purchase from Apple.
The InvisiGlass Ultra Front and Back...
Apple this morning released the second beta of watchOS 6, the software that runs on the Apple Watch. The second beta comes two weeks after Apple first unveiled the new update at the Worldwide...
Apple today seeded the second beta of an upcoming tvOS 13 update to developers, two weeks after first unveiling the tvOS 13 software at the Worldwide Developers Conference.
Designed for the...
Aspyr has announced that today is the last day of sales for its 32-bit Mac games, in anticipation of Apple's upcoming move to 64-bit only apps on macOS Catalina later this year.
After...
