iOS Device Ransom Attacks Continue to Target Users in U.S. and Europe

Discussion in 'MacRumors.com News Discussion' started by MacRumors, Jul 8, 2016.

  1. MacRumors macrumors bot

    MacRumors

    Joined:
    Apr 12, 2001
    #1
    [​IMG]


    A few years ago, a number of users in Australia were victimized by attackers remotely locking iPhones, iPads, and Macs using Find My iPhone on iCloud. Compromised devices typically displayed Russian ransom messages demanding payments of around $50 to $100 for the device to be unlocked.

    [​IMG]
    A ransom message targeting a Mac in 2014 with the common pseudonym "Oleg Pliss"

    At the time, IT security expert Troy Hunt noted that the attackers were likely using compromised emails and passwords exposed from various online security breaches to log in to iCloud accounts. AOL and eBay, for example, were among several high-profile companies that suffered data breaches in 2014.

    Apple later confirmed that iCloud was not compromised, and that the eventually-arrested attackers had instead gained access to Apple IDs and passwords through external sources. Russian website MKRU said the attackers obtained the credentials via phishing pages and social engineering techniques.

    Since then, CSO security blog Salted Hash has discovered that, since at least February of this year, these ransom attacks have returned and now target users in the U.S. and Europe. The methods used by attackers are said to be the same ones used in 2014, starting with a compromised Apple ID.
    The website shared screenshots and linked to a number of Facebook, Twitter, and Reddit users whose devices appear to have been held for ransom in recent months, but there is speculation that the problem could be much larger than that. The following excerpt is highly questionable, however, and could very likely be incorrect.
    The report adds that "for now, let's assume there hasn't been a massive iCloud data breach." Apple has not commented on the matter.

    Given that the Apple ID credentials involved in the ransom attacks are believed to originate from online security breaches, Salted Hash pointed towards a recently compromised Mac-Forums.com database, which allegedly includes 291,214 accounts, being sold for around $775 on the darknet.

    There is currently no evidence to suggest that the Mac-Forums database has any relation to these ransom attacks, but users with an account on that website should change their passwords out of an abundance of caution. Setting a device passcode and enabling two-factor authentication for your Apple ID is also highly recommended.

    Apple has a support document outlining steps to take if you think your Apple ID has been compromised. Also read security and your Apple ID.

    Article Link: iOS Device Ransom Attacks Continue to Target Users in U.S. and Europe
     
  2. sudo1996 Suspended

    sudo1996

    Joined:
    Aug 21, 2015
    Location:
    Berkeley, CA, USA
    #2
    Well there you go. Two companies that figured out how to make something popular and never figured out how to make it secure. Apple is somewhat guilty of this too.
     
  3. MagMan1979 macrumors member

    MagMan1979

    Joined:
    May 4, 2015
    #3
    Until world governments update their laws to throw the book at ANY hacker, and users smarten up and start using passwords other than "password", this kind of crap will continue.

    I know, neither thing will ever happen, and I'm just being an optimist...
     
  4. BittenApple macrumors 6502a

    BittenApple

    Joined:
    Nov 29, 2008
  5. sudo1996 Suspended

    sudo1996

    Joined:
    Aug 21, 2015
    Location:
    Berkeley, CA, USA
    #5
    The other option is for big companies to accept these problems. I like that Google has two-factor auth by default and doesn't allow password reset using security questions alone. Apple needs to do this too.
     
  6. vooke macrumors 6502

    vooke

    Joined:
    Jul 14, 2014
    #6
    Just use different passwords for all your accounts. But I share and recycle passwords between PayPal, eBay,gmail and so forth...laziness is costly I suppose
     
  7. MH01 Suspended

    MH01

    Joined:
    Feb 11, 2008
    #7
    There lies the problem when everything in the Apple ecosystem is now linked by Appleid . It's a real shame as many users use the same email / password for many websites / services .
     
  8. AbblePC macrumors regular

    Joined:
    Aug 1, 2009
    #8
    Well at least the internet having "darknet" gives something over iOS 10 not having darkmode thus far.
     
  9. Avieshek Suspended

    Avieshek

    Joined:
    Dec 7, 2013
    Location:
    India
  10. LordQ Suspended

    LordQ

    Joined:
    Sep 22, 2012
    #10
    WTF? That comment doesn't make any sense here.
     
  11. Tubamajuba macrumors 68020

    Joined:
    Jun 8, 2011
    Location:
    Done with MacRumors, the trolls have won
    #11
    Apple is responsible for third party security breaches? Really now.

    I've got an idea! Let's start reading articles instead of making baseless comments after glancing at a headline. Deal?
     
  12. MH01 Suspended

    MH01

    Joined:
    Feb 11, 2008
    #12
    The issue here is what you can do once you acquire the password. You need to be active with things like two step authentication ....assume that any password can be compromised.
     
  13. AbblePC macrumors regular

    Joined:
    Aug 1, 2009
    #13
    Liken to slipping on a banana under One's foot.
     
  14. Tim Chef macrumors member

    Tim Chef

    Joined:
    Apr 21, 2016
  15. sziehr macrumors 6502a

    Joined:
    Jun 11, 2009
    #15
    This sort of thing makes me wonder why companies have not latched on more vigorously to things like touchID. I can not just impersonate that over the phone in a far off land. I have to get into your secure enclave or have your physical phone. This is the direction everything needs to go.
     
  16. macduke macrumors G3

    macduke

    Joined:
    Jun 27, 2007
    Location:
    Central U.S.
    #16
    I had someone trying to hack into my iCloud account for the first time the other day. IDK how far they got, but my account was locked. I had two-step turned on, which probably helped. I changed my password just in case and then learned how to setup two-factor authentication, which is supposed to be a little better than two-step because it uses a six digit code and I think it won't even let them start trying codes until you approve from your device (also shows a map) and then it generates the key. Interesting to note, however, that it showed my Apple TV being hundreds of miles away in Chicago, IL when I re-authenticated it to get my Schlage Sense deadbolt to connect to it for remote HomeKit access.

    Does anyone know what would cause an iPhone to never receive security codes? They come through fine in texts and in device codes sent to my iPad and Macs, but device codes never come through to my iPhone. It didn't work with two-step, and it still doesn't work with two-factor. I had even mentioned it in passing to Apple support (I was working through an iCloud data sync glitch with photos in Notes that used a ton of LTE data a few weeks ago) and they couldn't ever figure out why I wasn't getting them. It seems to have started a few months back at some point between February-April.
     
  17. Kaylor macrumors regular

    Kaylor

    Joined:
    Oct 18, 2011
    Location:
    Long Island, NY/Houston, TX
    #17
    What does Tim Cook have to do with people using weak passwords, using the same passwords between accounts, not changing them regularly, ect. ?
     
  18. djcerla macrumors 68000

    djcerla

    Joined:
    Apr 23, 2015
    Location:
    Italy
    #18
    Reading comprehension is slipping faster, apparently.
     
  19. Tim Chef macrumors member

    Tim Chef

    Joined:
    Apr 21, 2016
    #19
    He could send them an email gently reminding them to change passwords every now and then.
     
  20. rdlink macrumors 68040

    rdlink

    Joined:
    Nov 10, 2007
    Location:
    Out of the Reach of the FBI
    #20
    TFA must be universal.

    Also, this would be a good use of military commandos. Zero in on these guys and exterminate them. And yes, I'm serious.
     
  21. Thunderhawks Suspended

    Joined:
    Feb 17, 2009
    #21
    Go ahead erase my Angry Birds apps.
    Why would anybody keep important data on their iPhones without backing them up?
    Now, if they hacked dropbox, I'd have a problem.
     
  22. madsci954 macrumors 68030

    Joined:
    Oct 14, 2011
    Location:
    Ohio
    #22
    No amount of innovation can fix human stupidity.
     
  23. FightTheFuture macrumors 6502a

    FightTheFuture

    Joined:
    Oct 19, 2003
    Location:
    that town east of ann arbor
    #23
    iCloud didn't launch until after SJ's death.
     
  24. Sasparilla macrumors 65816

    Joined:
    Jul 6, 2012
    #24
    As your AppleID/iCloud/iTunes becomes more integral to using iThings then good security with your ID becomes more important.

    Use a different (and long) pword than any other account for your AppleID, make sure your security questions can't be answered by looking stuff up on the internet or intelligent guessing and enable 2 factor authentication.
     
  25. kemal macrumors 65816

    kemal

    Joined:
    Dec 21, 2001
    Location:
    Nebraska
    #25
    Erase the phone or erase the phone and leave it locked?
     

Share This Page