Apple iPhone at risk of hacking through email app:
@23 April 2020
A flaw in Apple’s mobile operating system may have left millions of iPhone and iPad users vulnerable to hackers.
Research published by ZecOps, a mobile security firm, said a bug in the Mail app made devices susceptible to sophisticated attacks.
The firm said it had “high confidence” the bug has been used to exploited at least six high-profile victims.
An Apple spokesperson told Reuters a fix would be included in upcoming software updates.
ZecOps reported the bug to Apple in March. The tech giant had not previously known about the issue.
To exploit this flaw, hackers would send a seemingly blank message to an iPhone or iPad users Mail account – the email app on iOS devices. When the email was opened it would crash the app forcing the user to reboot. During the reboot, hackers would be able to access information on the device.
What makes this attack different from other hacks is users do not need to download any external software or visit a website that contains malicious software (malware). Typically hacks require some action on the part of the victim – those steps make possible to trace the origin of the attack.
The researchers said the bug could be exploited even on recent versions of iOS.
ZecOps claimed it had found evidence that the bug was used to attack well-known targets including individuals from a Fortune 500 company in North America, an executive from a mobile carrier in Japan, employees of technology companies in Saudi Arabia and Israel, a European journalist and an individual in Germany. The firm would not disclose the identities of the victims.
Apple products are typically considered to be more secure than other mobile devices. Experts say this shows how difficult it can be to spot underlying vulnerabilities.
In a completely sane world, madness is the only freedom (J.G.Ballard).
Viewing 1 post (of 1 total)
You must be logged in to reply to this topic.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.