Hackers targeting jail-broken iPhones have raided more than 225,000 Apple accounts, using them for app-buying sprees or to hold phones for ransom, researchers said on Tuesday.
Jail-broken means modified to run apps not sanctioned by Apple.
"We believe this to be the largest known Apple account theft caused by malware," computer security firm Palo Alto Networks said in an blog post.
An attack using malicious code dubbed "KeyRaider" was discovered by WeipTech, an amateur technical group from Weiphone, described as one of the largest Apple fan websites in China, according to Palo Alto Networks.
In July, WeipTech members began investigating reports that some people's Apple accounts were used to make unauthorized purchases or application installations.
WeipTech worked with Palo Alto Networks to uncover KeyRaider.
KeyRaider is being distributed through Cydia repositories in China but may be affecting users in 18 countries including France, Australia, and the United States, according to Palo Alto Networks.
Cydia repositories are locations where software for jail-broken iPhones can be found and installed.
KeyRaider targets Apple mobile devices that have been jail-broken, or altered to run applications or other software not sanctioned by the California-based maker of iPhones, iPads, and iPods.
While investigating KeyRaider, WeipTech discovered an online server with passwords and other information from more than 225,000 Apple accounts, according to Palo Alto Networks.
The malicious code steals Apple account information by intercepting iTunes traffic and App Store purchase data. It can also be used to thwart users from unlocking iPhones or iPads, according to researchers.
"In addition to stealing Apple accounts to buy apps, KeyRaider also has built-in functionality to hold iOS devices for ransom," Palo Alto Networks said.
"It's important to remember that KeyRaider only impacts jail-broken iOS devices."
In comment provided to AFP, Apple stressed that it makes a priority of security and that the App Store is curated to make sure software developers stick to guidelines set by the company.
"iOS is designed to be reliable and secure from the moment you turn on your device," an Apple official said.
"This issue only impacts those who not only have jail-broken devices, but have also downloaded malware from untrusted sources."
Apple added that it is helping those affected by KeyRaider to reset iCloud accounts with new passwords.
AFP
Wed Sep 02 2015
Apple added that it is helping those affected by KeyRaider to reset iCloud accounts with new passwords.
Jumlah korban serangan di dewan konsert Rusia meningkat kepada 143
Jumaat lepas, sekumpulan lelaki bersenjata melepaskan tembakan rambang di Dewan Bandaraya Crocus, Krasnogorsk dalam Wilayah Moscow.
Kerjasama dua hala India-Malaysia bergantung kepada kepercayaan, kebolehpercayaan bersama - Menteri Luar
Memupuk kepercayaan dan kebolehpercayaan bersama sebagai asas untuk kerjasama dua hala antara India dan Malaysia adalah sangat penting, kata Menteri Luar India, Dr S. Jaishankar.
AWANI 7:45 [28/03/2024] - 75 peratus pemegang akaun keldai | Sakit mata, sakit hati | Bayar agihan pendapatan | Elak serbuan saat akhir
#AWANI745 malam ini bersama Essan Yahya;
1. Scammer! Dalam tiga bulan, lebih empat ribu ditahan
2. Hati jadi sakit, lambakan kereta terbiar depan rumah... Gempur745 siasat
3. PNB agih pendapatan RM0.67 bilion
4. Tambahan 300 kaunter PADU seluruh negara
1. Scammer! Dalam tiga bulan, lebih empat ribu ditahan
2. Hati jadi sakit, lambakan kereta terbiar depan rumah... Gempur745 siasat
3. PNB agih pendapatan RM0.67 bilion
4. Tambahan 300 kaunter PADU seluruh negara
AWANI Ringkas: Rusuhan di bazar Ramadan
AWANI Ringkas
PM Anwar beri bayangan tiada 'cuti tambahan' sempena sambutan Aidilfitri
Perdana Menteri, Datuk Seri Anwar Ibrahim beri bayangan tiada cuti tambahan diberikan menjelang sambutan Hari Raya Aidilfitri yang dijadual pada 10 April depan.
UAE lancar kempen derma lebihan makanan sepanjang Ramadan
Emiriah Arab Bersatu (UAE) menerusi UAE Food Bank melancarkan kempen menderma lebihan makanan sepanjang ramadan kepada mereka yang memerlukan.
Pelapor Khas PBB terima ugutan
Pelapor Khas Pertubuhan Bangsa-Bangsa Bersatu (PBB), Francesca Alabanese mendedahkan menerima ugutan ketika cuba mengumpulkan bukti genosid dilakukan Israel di genting Gaza.
Pentadbiran Biden arah semua agensi persekutuan AS lantik ketua pegawai AI
Pentadbiran Presiden Joe Biden telah mengarahkan semua agensi persekutuan negara itu melantik seorang ketua pegawai Kecerdasan Buatan (AI) untuk menyelia semua teknologi berkaitan.
Gempur: Masalah lambakan kereta usang membelenggu penduduk
Lambakan kereta tersadai di kawasan flat Sri Pantai menyebabkan penduduk berdepan masalah kekurangan parkir. Ada yang sudah berbulan malah ada yang bertahun tersadai sehingga menyebabkan kesesakan di kawasan parkir. Walaupun beberapa kali pihak berkuasa menunda kenderaan, tetapi masalah ini terus berulang.
Ramai serbu Jalan TAR tapi belum cukup meriah
Saban tahun, Jalan Tunku Abdul Rahman (TAR) meriah tatkala menghampiri Hari Raya Aidilfitri namun tahun ini, selepas lebih dua minggu Ramadan, suasananya masih belum cukup meriah berbanding tahun-tahun sebelumnya.