Saturday, 15 June 2013

No Jailbreaking Needed, Just This Charger to Hack the iPhone

Most people have heard of malicious software as a way to hack into an iPhone, but what about a malicious charger? Three researchers with the Georgia Institute of Technology say they have come up with a proof-of-concept malicious iPhone charger that lets them hack into the mobile device running the latest version of Apple's iOS in less than one minute. No jailbreaking required.

VIDEOS: How an iPhone charger opens your phone to hackers

It looks like a charger, smells like a charger and tastes like a charger, but it's not just a charger

It might pay to be more careful about where you juice up your phone-because a team of researchers from the Georgia Institute of Technology have put together a prototype charger capable of installing malware onto an iPhone.
The research, which is to be presented at the Black Hat security conference in late July and was spotted by Forbes, was born out of the idea of creating innocent-looking devices which could be used to hack phone. Describing their findings as ""alarming"", the researchers explain:
""Despite the plethora of defense mechanisms in iOS, we successfully injected arbitrary software into current-generation Apple devices running the latest operating system (OS) software... All users are affected, as our approach requires neither a jailbroken device nor user interaction."
Their charger, Mactans-that's another name for the Black Widow spider-uses a small onboard computer to perform its underhand duties. In fact it's based on a Texas Instruments BeagleBoard, which retails at $45. While the resulting charger measures three inches square-bigger than your average power supply-it's still a worrisome proof of concept which could easily be squeezed into a smaller form factor if required, just at higher cost.
Details are-fortunately!-scant about exactly how the device works, but the researchers claim that it can compromise iOS in under a minute, and that the malware infection is persistent and tough to spot. So, think twice about what your plug your phone into. 

 

No comments:

Post a Comment