TechSpot

Hackers using Find My iPhone feature to hold Apple devices for ransom

By Justin Kahn
May 27, 2014
Post New Reply
  1. There have been a number of Australian iPhone, iPad and Mac users getting their devices hacked, according to reports. Based on discussions from the Apple forums, it appears hackers are locking out users from their own devices via the Find...

    Read more
     
  2. lmike6453

    lmike6453 TS Rookie Posts: 98   +6

    Lol @ sacrificing security for convenience
     
  3. fredderf81

    fredderf81 TS Rookie Posts: 29   +20

    But...but...wait, the genius at the apple store said the apple products can't get hacked and can't get viruses??? have they been lying to us all these years??!?!?!


    **please note the heavy amount of sarcasm included with this post**
     
    Auth3ntic0 and dennis777 like this.
  4. Rippleman

    Rippleman TS Booster Posts: 278   +56

    To those that don't know (the guy above me in this thread): this isn't hacking and its not a virus. The persons affected have been fished for their apple ID. With this apple ID, they simply log on to the findmyphone link on apples site and say LOCK PHONE with their username and password.
     
  5. I don't think the Apple guys are claiming they are virus free. I do think they're claiming that it is significantly less than Windows which is true. And I'm sure it's less than Android as well. Apple has lower market share so there is definitely bigger fish out there. Nevertheless, if their market share continues to increase, they will be targeted more.
     
  6. Another reason NOT to use an iPhone. The first is their price, the second is my unwillingness to support a 'smug' company. The third is their general ugliness and lack of usefulness.

    This is the forth reason, at least.
     
  7. cliffordcooley

    cliffordcooley TechSpot Paladin Posts: 6,401   +1,591

    This is so funny to me. I feel bad for those who have been effected by this. But the fact that any device can be locked down by use of any features is plain laughable. Next stop is reading about hackers exploiting kill switches. Kill switches are such a pathetic idea but they are coming.
     
    JC713 and gamoniac like this.
  8. gamoniac

    gamoniac TS Enthusiast Posts: 242   +55

    Yep. That is one feature that will deter me from getting any device with it. I can see the need for it but the risks simply aren't justifiable.
     
  9. yukka

    yukka TechSpot Paladin Posts: 742   +32

    I don't see why kill switches are a problem if the technology backing them up is robust. If someone thinks "If I steal that phone, its going to be a worthless piece of metal an hour after I take it" then they might not bother taking it, unless the market for replacement screens and parts becomes a hotbed of criminal activity (it might already be, I don't know).

    The problem uncovered here for me is that the apple ID password is the only requirement for access to a whole load of information. iCloud keychain, App Store purchases, findmyphone, iCloud email etc etc etc.

    So if someone steals someones apple ID (which can't be harder in some cases than scanning the latest adobe leak and testing out usernames vs common passwords) they can then get an iPhone or iPad, log into it with that apple ID, install an iCloud backup (private notes, iMessages, loads of other stuff) and access any sites they have stored credentials in their iCloud keychain.

    Thats a mother of a security issue and I imagine that most apple ID passwords are pretty simple (not 16 character etc) as they are needed to authenticate in-app purchases and download free apps on the App Store, a sometimes daily occurrence for a lot of iPhone users. the appleID password needs to be separate and use proper 2 factor authentication especially for features like findmyphone, and downloading iCloud backups to new devices.
     


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.