Hackers targeting jail-broken iPhones have raided more than 225,000 Apple accounts, using them for app-buying sprees or to hold phones for ransom, researchers said on Tuesday.
Jail-broken means modified to run apps not sanctioned by Apple.
"We believe this to be the largest known Apple account theft caused by malware," computer security firm Palo Alto Networks said in an blog post.
An attack using malicious code dubbed "KeyRaider" was discovered by WeipTech, an amateur technical group from Weiphone, described as one of the largest Apple fan websites in China, according to Palo Alto Networks.
In July, WeipTech members began investigating reports that some people's Apple accounts were used to make unauthorized purchases or application installations.
WeipTech worked with Palo Alto Networks to uncover KeyRaider.
KeyRaider is being distributed through Cydia repositories in China but may be affecting users in 18 countries including France, Australia, and the United States, according to Palo Alto Networks.
Cydia repositories are locations where software for jail-broken iPhones can be found and installed.
KeyRaider targets Apple mobile devices that have been jail-broken, or altered to run applications or other software not sanctioned by the California-based maker of iPhones, iPads, and iPods.
While investigating KeyRaider, WeipTech discovered an online server with passwords and other information from more than 225,000 Apple accounts, according to Palo Alto Networks.
The malicious code steals Apple account information by intercepting iTunes traffic and App Store purchase data. It can also be used to thwart users from unlocking iPhones or iPads, according to researchers.
"In addition to stealing Apple accounts to buy apps, KeyRaider also has built-in functionality to hold iOS devices for ransom," Palo Alto Networks said.
"It's important to remember that KeyRaider only impacts jail-broken iOS devices."
In comment provided to AFP, Apple stressed that it makes a priority of security and that the App Store is curated to make sure software developers stick to guidelines set by the company.
"iOS is designed to be reliable and secure from the moment you turn on your device," an Apple official said.
"This issue only impacts those who not only have jail-broken devices, but have also downloaded malware from untrusted sources."
Apple added that it is helping those affected by KeyRaider to reset iCloud accounts with new passwords.
AFP
Wed Sep 02 2015
Apple added that it is helping those affected by KeyRaider to reset iCloud accounts with new passwords.
Misi ditangguh, delegasi Malaysia berlepas pulang
Delegasi Malaysia dalam misi Break The Siege Freedom Flotilla To Gaza akan berlepas pulang malam ini.
Keputusan dicapai selepas Freedom Flotilla Coalition (FFC) tidak dapat meneruskan misi selepas Republik Guinea-Bissau menarik balik kebenaran menggunakan bendera untuk dua kapal yang digunakan.
Laporan lanjut bersama Syaff Shukri di Istanbul.
Keputusan dicapai selepas Freedom Flotilla Coalition (FFC) tidak dapat meneruskan misi selepas Republik Guinea-Bissau menarik balik kebenaran menggunakan bendera untuk dua kapal yang digunakan.
Laporan lanjut bersama Syaff Shukri di Istanbul.
Mahmoud Abbas menyeru semua negara iktiraf Palestin
Presiden Palestin Mahmoud Abbas menyeru semua negara untuk mengiktiraf Palestin sebagai negara merdeka serta mengiktiraf ahli penuh Persatuan Bangsa Bangsa Bersatu (PBB). Beliau diberi peluang berucap di Mesyuarat Khas Forum Ekonomi Dunia (WEF) di Arab Saudi hari ini.
Mesyuarat Khas WEF: Rangkuman hari pertama, tiga kayu ukur ekonomi perlu ada
Jurang pemulihan ekonomi menjadi modal mula mesyuarat khas World Economic Forum di Riyadh.
Bagi Malaysia, kelebihan asean di ketengahkan, manakala negara maju mahu keadaan ekonomi yang lebih sekata.
Persoalan besar adalah bagaimana titik keseimbangan dapat dicapai?
Najib Aroff bawakan laporan.
Bagi Malaysia, kelebihan asean di ketengahkan, manakala negara maju mahu keadaan ekonomi yang lebih sekata.
Persoalan besar adalah bagaimana titik keseimbangan dapat dicapai?
Najib Aroff bawakan laporan.
SPRM mohon maklumat dari Jerman berhubung dana 1MDB disyaki beli kereta mewah
Ia berhubung laporan kereta mewah dirampas oleh pihak berkuasa Jerman di Munich yang dipercayai berkait dengan kes 1MDB.
P.Pinang kerjasama dengan Persekutuan teruskan usaha tarik pelaburan semikonduktor
Kerajaan Pulau Pinang akan bekerjasama dengan Kerajaan Persekutuan untuk meneruskan usaha menarik pelaburan dalam sektor semikonduktor, termasuk segmen reka bentuk litar bersepadu (IC) di negeri itu.
Akta baharu berkuat kuasa 1 Jun
Akta Keselamatan Dan Kesihatan Pekerjaan (Pindaan) 2022 akan berkuat kuasa pada 1 Jun ini sekali gus meningkatkan lagi tahap keselamatan dan kesihatan di tempat kerja di seluruh negara, kata Menteri Sumber Manusia Steven Sim.
Pelaburan baharu memberi cabaran baharu kepada Malaysia
Pelaburan baharu yang diterima Malaysia memberi cabaran baharu khususnya dalam memberi fokus dalam bidang teknologi dan juga Latihan dan Pendidikan Teknikal dan Vokasional (TVET).
AWANI Borneo [28/04/2024] – Daftar di Yayasan Sarawak | Kos ganti paip RM9 bilion | Tarikan Kitaro
Laporan berita padat dan ringkas dari Borneo bersama Assim Hassan
#AWANIBorneo 28 April 2024
- Kerajaan Sarawak tanggung kos pelajaran anak mendiang Joanna
- Kebocoran paip penyumbang utama air tidak terhasil
- Kitaro magnet tarik pengunjung RWMF 2024
#AWANInews
#AWANIBorneo 28 April 2024
- Kerajaan Sarawak tanggung kos pelajaran anak mendiang Joanna
- Kebocoran paip penyumbang utama air tidak terhasil
- Kitaro magnet tarik pengunjung RWMF 2024
#AWANInews
Kesatuan Ragbi Malaysia harap individu disyaki pecah amanah didakwa segera
Kesatuan Ragbi Malaysia (KRM) berharap individu di sebalik isu pecah amanah disyaki berlaku dalam pengendalian akaun bank badan induk itu didakwa segera.
PM adakan pertemuan dengan Presiden Rwanda
Perdana Menteri Datuk Seri Anwar Ibrahim mengadakan pertemuan dua hala dengan Presiden Rwanda Paul Kagame di luar Mesyuarat Khas Forum Ekonomi Sedunia (WEF) pada Ahad.