Number: IRCNE2015082618
Date: 2015/09/05
According to “zdnet”, a new kind of malware targeting iPhones and iPads is able to steal security certificates, usernames and passwords, and other private account data.
Researchers at Weiptech and Palo Alto Networks said in a blog post Sunday they had discovered a database of thousands of Apple account accounts, which had been stolen by malware distributed through repositories used by popular jailbreak tool Cydia.
The malware, dubbed KeyRaider, intercepts iTunes traffic on the device, stealing usernames, passwords, and unique device identifiers, which are then uploaded to the malware owner's server.
More than 225,000 users from 18 countries are thought to be affected by the malware.
"We believe this to be the largest known Apple account theft caused by malware," said Claud Xiao, the post's author.
The malware is also known to have locked devices, holding them for ransom, an increasingly popular method of generating potentially vast sums of money for attackers.
The malware targets devices that have been jailbroken, a process where device restrictions are cracked, allowing users greater access to the device's functionality. By allowing developers to tap into the device's core, users have greater customization and access to features. But with that comes its own risks, by giving malware that same access.
- 4