Sci-tech

Phishing attack dupes iPhone users into revealing their Apple ID password

Phishing attack dupes iPhone users into revealing their Apple ID password”

But what if that pop-up hasn't come from Apple, and has instead been created to look like an official request in an attempt by hackers to steal your credentials?

The proof-of-concept was detailed by Felix Krause, founder of the open-source app-building tool fastlane. From there, the app could send that popup and subsequently log the Apple ID and password.

But developer Felix Krause discovered that an app only needs about 30 lines of code to include a fraudulent "Enter your Apple ID password" popup that can be used to steal user data. Reporting potentially fraudulent apps to Apple is also advisable. As his pictures show, this can be designed by a developer to look identical to a "Sign into iTunes Store" pop-up. It would be hard for users to make out the difference, leading them to enter their credentials and being none the wiser. No word on when it will be offered to the rest of the iOS users.

If you are an iOS user, you would definitely have come across the pop up dialog above at some point.

For most users, it's impossible to differentiate between system dialogs and the phishing prompt. He also thinks that Apple should have some sort of prompt or indicate when a dialog is a system-generated one and when it is an app-generated one. Users, however, are really left with little recourse than a few tricks, like pressing the home button to see if the popoup is an official system one, in which case it will remain on screen, or a phishing attempt, in which case it should disappear. All of that using the official tools that Apple provides developer to make popups and dialog boxes. If this closes the app and the dialog, then it was a phishing attack. This freedom can be abused by showing a UIAlertController which looks just like a regular system dialog.

It's also worth noting that this type of attack would hinge on the malicious app making it through the App Store review process, and the code then being activated by the developer. Krause does however note that "organisations with bad intent will always find a way to somehow work around the limitations of a platform".



Like this

loading...
loading...

Latest


11 October 2017
How to Watch Honduras vs. Mexico
USA head coach Bruce Arena calls his team's failure to qualify for the World Cup "a blemish and a disappointment". The USA went down 2 - 1 and are not going to Russian Federation for the World Cup next year.

11 October 2017
Super Mario Odyssey: Ranking All 8 Revealed Kingdoms So Far
The game is out on October 27 for the Nintendo Switch, and will be a holiday must-buy for Switch owners. Even though the hard mode was not unlocked behind the toys, Fusion Mode was the one that was unlocked.

11 October 2017
Dolphins hire Dave DeGuglielmo as senior offensive assistant
Gase even credited Foerster as a good coach who put in long hours and "worked as hard as he could" for the team. DeGugliemo operated as the Los Angeles Rams assistant offensive line coach from 2016-Oct.

11 October 2017
Next Weeks Broker Price Targets For Skyworks Solutions, Inc. (NASDAQ:SWKS)
JP Morgan has "Neutral" rating and $88 target. (NASDAQ:DGLY) has "Buy" rating given on Monday, August 10 by TH Capital. Finally, Keybank National Association OH raised its position in Skyworks Solutions by 1.2% in the fourth quarter.

11 October 2017
Adrian Peterson Fantasy Value Rises After Trade, Jerick McKinnon Comparison
Peterson has at times seemed unhappy sharing carries with running backs Mark Ingram and Alvin Kamara. Peterson carried the ball 27 times for a 81 yards in four games with the Saints.

11 October 2017
Philip Morris International's (PM) Outperform Rating Reaffirmed at Wells Fargo & Company
Perpetual Ltd acquired a new stake in Philip Morris International during the 2nd quarter worth about $1,867,000. (NYSE:PM). Deroy And Devereaux Private Inv Counsel has invested 0.04% of its portfolio in Philip Morris International Inc. (NYSE:PM).

11 October 2017
A Rainy & Mild Day
Highs will warm into the mid- to upper 80s, with heat indexes once again approaching 100 degrees on Monday , the forecast says. Patchy frost was possible this morning in the Omaha area before sunny skies and a high temperature in the lower 60s prevail.

11 October 2017
Moving Fire Overwhelms Napa Home, Kills World War II Veteran and Wife
They have lived in Napa for 35 years, which is longer than they have lived anywhere else in their lives. Sara, an avid bridge player, took care of the family and a succession of handsome homes.

11 October 2017
Ben Affleck angry about Harvey Weinstein allegations
Weinstein has further confirmed that there were never any acts of retaliation against any women for refusing his advances". She said: "His behaviour is without question disgraceful and appalling and very, very wrong".

11 October 2017
BlackRock Beats Q3 Views As Investors Keep Pouring Money Into ETFs
The firm's share price was up 0.75 per cent in premarket trading at 2pm United Kingdom time. Fees from the company's index-tracking iShares rose 38 percent to $1.07 billion.