Security Researcher Develops Lightning Cable With Hidden Chip to Steal Passwords

A normal-looking Lightning cable that can used to steal data like passwords and send it to a hacker has been developed, Vice reports.

omg lightning cable comparisonThe "OMG Cable" compared to Apple's Lightning to USB cable.

The "OMG Cable" works exactly like a normal Lightning to USB cable and can log keystrokes from connected Mac keyboards, iPads, and iPhones, and then send this data to a bad actor who could be over a mile away. They work by creating a Wi-Fi hotspot that a hacker can connect to, and using a simple web app they can record keystrokes.

The cables also include geofencing features that allow users to trigger or block the device's payloads based on its location, preventing the leakage of payloads or keystrokes from other devices being collected. Other features include the ability to change keyboard mappings and the ability to forge the identity of USB devices.

The cables contain a small implanted chip and are physically the same size as authentic cables, making it extremely difficult to identify a malicious cable. The implant itself apparently takes up around half of the length of a USB-C connector's plastic shell, allowing the cable to continue to operate as normal.

omg lightning cable x rayAn x-ray view of the implanted chip inside the USB-C end of an OMG Cable.

The cables, made as part of a series of penetration testing tools by the security researcher known as "MG," have now entered mass production to be sold by the cybersecurity vendor Hak5. The cables are available in a number of versions, including Lightning to USB-C, and can visually mimic cables from a range of accessory manufacturers, making them a noteworthy threat to device security.

Top Rated Comments

zorinlynx Avatar
8 weeks ago
>and then send this data to a bad actor who could be over a mile away. They work by creating a Wi-Fi

"a mile away"

"Wi-Fi"

These hackers need to work for Asus, Ubiquity, Linksys, etc. and improve WiFi range!
Score: 58 Votes (Like | Disagree)
coachgq Avatar
8 weeks ago
guess I should pay the $20 to apple instead of the $7 to an ebay seller to keep my info safe? Danggit that sucks!
Score: 32 Votes (Like | Disagree)
abbeybound Avatar
8 weeks ago
I'm going to call BS on this. A powerful compute module with memory, wifi with somehow a one mile range, and location services for geofencing, all in half a USB-C connector?
Score: 28 Votes (Like | Disagree)
ersan191 Avatar
8 weeks ago
"who could be over a mile away"

Damn the WiFi in my house barely reaches my garage, maybe I need one of these cables.
Score: 27 Votes (Like | Disagree)
bearda Avatar
8 weeks ago
So there's a lot of scaremongering and assumptions being thrown around here. For the key logging function you have to be using the cable to hook up between a keyboard and a device so the traffic can be sniffed. Wireless keyboard aren't affected. Onscreen keyboards aren't affected. iOS devices lock the USB port by default (the phone "unlock your phone to use the connected device" prompt you get when connecting to a car, etc) so it's not like this is going to allow an attacker any additional access to a locked phone.

Don't connect your device to random cables and you'll be fine.
Score: 20 Votes (Like | Disagree)
Maclver Avatar
8 weeks ago

So who will they sell to?
No one.... They will probably sit in the airport and plug them into the charging stations
Score: 14 Votes (Like | Disagree)

Related Stories

apple watch charger s7

Apple Watch SE Now Comes With a USB-C Charging Cable

Thursday September 16, 2021 10:35 am PDT by
Customers who order one of Apple's lower-cost Apple Watch SE devices will now receive an upgraded USB-C charging cable in the package, rather than the previous USB-A charging cable. Apple is changing the cable in the box as it continues to transition away from USB-A and for consistency across the Apple Watch lineup. The Apple Watch SE will apparently ship with the same USB-C Fast Charger...
macbook pro 16 accessories

Apple Selling New $49 Braided MagSafe Cable and $99 140W Power Adapter for 16-Inch MacBook Pro

Monday October 18, 2021 11:35 am PDT by
To go along with the updated MacBook Pro models that are launching next week, Apple is stocking accessories for the machines. There's a 140W USB-C power adapter, which is Apple's most expensive power adapter to date at $99. There's also a $49 braided USB-C to MagSafe 3 cable for charging the MacBook Pro. Combined, it's going to cost right around $150 to get a new charging setup for the...
fuseorganizedcables

MacRumors Giveaway: Win a Set of Fuse Cable Organizers for Your Apple Devices

Friday April 9, 2021 11:20 am PDT by
For this week's giveaway, we've teamed up with Fuse to offer MacRumors readers a chance to win a full set of cable organizing options for Apple devices. Fuse has a whole line of cord management options for the iPhone, iPad, Apple Watch, and Mac that are well-designed and affordably priced. With so many people still working from home, Fuse accessory options are excellent for keeping home...
caldigit thunderbolt 4

CalDigit and OWC Unveil Thunderbolt 4 and USB 4 Cables

Thursday February 18, 2021 8:35 am PST by
Popular Mac accessory makers CalDigit and OWC have today announced new all-in-one Thunderbolt 4 and USB 4 cables, promising maximum data and power transfer over a single cable, as well as full compatibility with older USB devices. Thunderbolt 4 and USB 4 is the latest connectivity specification present in the newest Macs and high-end external hardware, offering performance up to 40Gb/s,...
apple watch series 7 fast charge

Apple Watch Series 7 Fast Charging Requires 5W or Greater USB-C PD Adapter

Thursday October 14, 2021 7:47 pm PDT by
The Apple Watch Series 7 includes a new charging architecture that allows it to refuel up to 33% faster than the Series 6, charging from 0 to 80% in 45 minutes. The fast-charging capability requires a new USB-C charging cable that Apple includes in the box with the watch and also sells separately, but until now Apple hasn't provided details on what wattage of power adapter is required for...
USB C Over Lightning Feature

EU Proposes to Force Apple to Switch iPhone, iPad, and AirPods From Lightning to USB-C

Thursday September 23, 2021 4:57 am PDT by
The European Commission has presented legislation that would compel Apple to use a USB-C port on all iPhones, iPads, and AirPods in Europe (via Reuters). The proposal, known as a directive, would force all consumer electronics manufacturers who sell devices in Europe to ensure that all smartphones, tablets, cameras, headphones, portable speakers, handheld videogame consoles feature a USB-C...
anker sept 9 image

Deals: Get Up to 40% Off Anker's Top Charging Accessories in Today's Gold Box Sale

Thursday September 9, 2021 6:30 am PDT by
Anker today opened up a new Gold Box sale on Amazon, taking up to 40 percent off select charging accessories for one day only. This includes portable chargers, car chargers, wireless chargers, USB-C cables, and more. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running....
anker 927 image

Deals: Get Up to 45% Off Anker's USB-C Chargers, MagSafe-Compatible Accessories, and More

Monday September 27, 2021 7:39 am PDT by
Anker today introduced a new Gold Box sale on Amazon, taking up to 45 percent off select accessories for one day only. This time around, the deals include savings on USB-C wall chargers, portable batteries, and MagSafe-compatible wireless chargers. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment,...
hyper 6 in 1 ipad hub

Hyper's New 6-in-1 Hub for USB-C iPads Features Media Playback Keys

Thursday October 7, 2021 8:38 am PDT by
Accessory maker Hyper today announced the release of its new 6-in-1 hub for iPad models with a USB-C port, including the latest iPad Pro, iPad Air, and iPad mini. Key features of the hub include a form-fitting design and built-in media shortcut keys. The hub fits snugly around the flat edge of recent iPad models, providing access to play/pause, rewind, and fast forward keys for audio and...
charging deals

Deals: Get 20% Off Hyper's 18W Battery Packs and Satechi's 100W USB-C Wall Charger

Thursday September 30, 2021 7:18 am PDT by
Today we have a pair of charging-related deals from Hyper and Satechi, which are offering 20 percent off a portable battery and USB-C wall charger, respectively. Hyper's sale will end later today, while Satechi's will run for one week, through October 7. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small...