Malware Steals 225 000 Logins For Jailbroken iOS Devices

Researchers have discovered malware stole usernames and passwords of 225,000 Apple accounts. The login data are from jailbroken iPhones and iPads. The iOS malware "KeyRaider" and spreads through third-party Cydia app stores in China.

Cydia is the app store where users can download a jailbroken device apps. Besides the official Cydia store, there are third-party stores. This app stores were installed apps to owners of jailbroken iPhone or iPad get additional functionality such as ad blocking, cheating in games, and tuning the system. In reality apps seemed to steal all kinds of information. The stolen information is then used by other users on a jailbroken device to make purchases in the official Apple App Store and in-app purchases to do without paying for it himself.

Furthermore steals KeyRaider also certificates and private keys used by the Apple Push Notification Service and prevents the malware that infected device can be unlocked via a pass code or iCloud service. This latter function uses the malware appliances, as ransomware the computer hostage. Victims have to pay in this case ransom to regain access to their device.

Since the malware only affects jailbroken iPhones and iPads advises security company Palo Alto Networks to non iOS devices jailbreak when it is not needed. According to researcher Xiao Claud, there are currently no Cydia app stores that monitor uploaded apps well. The use of this kind of app stores is therefore at your own risk, says the researcher.

American Airlines Flights Delayed By Crashing iPads

Dozens of American Airlines have suffered serious delays yesterday because the iPads by pilots, which are used for the flight suddenly crashed. An iPad app with navigation data and information on airport proved to be the culprit. According to Jeppesen, a subsidiary of Boeing and creator of the app, the problem was caused by a double folder in the database.

When loading a folder on the runway of the Ronald Reagan Washington National Airport showed the new version of the directory to conflict with the old version and caused the crash. Pilots could solve the problem ultimately by removing the app, and then reinstall it. In total, 70 flights because of the crashing iPads have slowed, reports the website Re / code . American Airlines was the first airline that decided to replace the cumbersome and awkward flight manuals by a tablet, which is now the norm in the industry is becoming, as the late New York Times know.

IOS Leak Late iPhones And iPads Crashing Within Wifi Range

A vulnerability in iOS allows attackers to iPhones and iPads to let wifi range crashing, allowing the devices in the worst case continue rebooting endlessly. The vulnerability was discovered by researchers at Skycure . For a demonstration of a network attack, the researchers bought a new router and set up in a certain way.

After the researchers had made connection with the router turned the iOS app on their device suddenly crashing. Not much later were other people in the neighborhood to do with crashes. It was found in all cases to iOS users. Further investigation revealed that the problem is caused by specially prepared SSL certificates. Attackers can use this set of apps that crash a SSL connection.

According to the researchers, almost all apps in the Apple App Store use SSL for their communications. An attacker has a lot of opportunities to strike. Not only is it possible to have used apps crash, the vulnerability also affects iOS itself. In certain cases it is possible to restart devices to engage endless, making them unusable, according to the researchers.

"Even if the victims realize that the attack comes from the Wi-Fi network, they can not turn off the WiFi interface." Since the problem is not completely solved by Apple users get the advice to not connect to Wi-Fi networks and suspicious anyway to update to iOS 8.3, as there are some of the problems found "possible" have been corrected.

Apple Removes Antivirus Apps From App Store For Misleading

Apple has removed antivirus apps in the iOS App Store because the description was misleading and could make customers think that there are viruses for the operating system, claims one of the affected anti-virus companies. Wednesday came Intego Virus fighter with the message that the program Virus Barrier Apple had been removed. This allows users to receive any program updates, as they walk through the App Store.Virus definitions are still updated, as it goes through a different channel.

VirusBarrier is an app that can scan files on iPads, iPhones and iPods, such as e-mail attachments. "Your iOS device can serve as a gateway for malware and viruses. Infected attachments can to your computer, your friends, family and colleagues to be sent," the description. According to Intego was the action of Apple not only against the company, but different companies would have been affected. Opposite MacRumors explains the CEO of Intego that Apple was misleading description of the app, because the customer might make you think that there are viruses for iOS would be in circulation.

Intego went against the removal appeal. "We were as clear as possible that this was not a scanner, that the e-mail attachments and cloud files scanned." Despite this explanation Apple decided not to reinstall the app. Why Apple has removed the apps is unknown. Last year decided Intego Virus Barrier itself from the Mac App Store to remove because it was not possible to offer a scanner that would conform to the expectations of users.

IP Box Can Lock Screen iPhones Brute forcing

Researchers have discovered a device that makes it possible to brute forcing the lock screen of iPhones and iPads. IP Box, as the device is called, would be used by telephone repairmen to bypass the screen lock of iOS. "This obviously has major implications for the safety and of course was something that we wanted to investigate and validate" said researchers MDSec .

They did eventually get to 200 pounds one of the devices. The IP Box appears to simulate via the USB connection to enter the PIN and also tries all possible pin combinations. According to the researchers, this has been known, but the device also works if the option is enabled to delete the data after 10 attempts.

"Our initial analysis indicates that the IP Box to circumvent the restrictions by making direct with the power of the iPhone connection and aggressively to break the flow after each unsuccessful PIN, but before the attempt is synchronized in the Flash memory." Entering a PIN would therefore take about 40 seconds. A four-digit PIN can therefore be outdated in some 111 hours.

The attack has been tested on iOS 8.1. An attack on iOS 8.2 will follow. The research would show that it is possible to have a leak was discovered last year, but this has yet to be confirmed. The researchers made ​​the following video on YouTube in which the device and the attack will be demonstrated.

Security Expert: Apple Wins Battle Of CIA

This week, The Intercept with a message about attempts by the CIA to crack the security of iPhones and iPads, but according to security expert Robert Graham Apple wins the battle of the American intelligence service. Intercept relies in its own article on documents from whistleblower Edward Snowden, but according to Graham's website saves the completely wrong in its interpretation.

During various conferences CIA would have looked at how information from iPhones can be decrypted. In 2011, when the conference took place, was decrypting encrypted iPhone data time-intensive and did not always work, says Graham. "The context of the presentation was not that she secretly wanted to spy on anyone. The context was that they wanted to decrypt the phones they received."

Contrary to what is in the article The Intercept is claimed Apple would actually win the battle of the CIA, Graham notes."Apple has made it priceless with the iPhone 4 to find out secrets, except in the most important situations, such as phones from the house of Bin Laden." The expert suggests that the iPhone 6 is likely to become impossible. "If the CIA comes to me, I doubt if they managed to get some information from my iPhone."

Xcode
Graham also discusses the trojaning Xcode, the Apple development tool for compiling iOS apps. This intelligence in all apps loopholes could build. "The CIA is not working to the Xcode that everyone used to trojaning. That would be impossible. They trojaning not the version that Apple provides to developers." Who has need Xcode installed according Graham whatsoever to worry.

Even iPhone users would not have to be afraid that Angry Birds contains a backdoor. "The purpose of the CIA are the hundred users of hawala-like app to make money, which is used only by legitimate targets. " In this case, the CIA would the developer of this app to break his or her Xcode a backdoor provided so that eventually all users of the app can be identified.

Malware Explores Home Network Via Router Attack

Researchers have discovered a mysterious instance of malware that attacks the router from infected computers, then bring it home network card and the malware is removed again. It is the Vice Pass Trojan, which occurs at sites like Flash Player update.

When users download the so-called update and open the Trojan is installed. Once active attempts Vice Pass to log in via a list of predefined user names and passwords and a specific range of IP addresses on the router. Then looks malware or other devices are connected to the router, such as iPhones, iPads, LaserJet and Xbox consoles. Once the scan is performed, the malware sends the results back to the attackers and then deletes itself.

Researchers at antivirus company Trend Micro think the Trojan probably "scout" is used for larger campaigns. "The collection of information may be the first step of larger attacks," said analyst Lu Kenney. The collected information could for example be used for cross-site request forgery attacks. "What is the real purpose, this malware shows how important it is to protect devices, even those not obvious target," said Lu. Users will also be advised to change the standard nature credentials of their router.

Apple Fixes FREAK Vulnerability In Mac OS X And iOS

Apple has released updates for Mac OS X, Apple TV and iOS that it " FREAK leak fixes "in SSL / TLS.Through the vulnerability, an attacker who is between a target and the Internet is in some cases the encryption of the encrypted connection to downgrade to a weak encryption to crack then that and to see the encrypted traffic.

Further resolves Security Update 2015-002 for Mac OS X four other vulnerabilities. It involves leakage and malicious app could execute arbitrary code with system privileges, memory addresses in the kernel were determined and could allow an attacker on the network arbitrary code via iCloud Keychain. iOS 8.2 fixes beside FREAK leak five other vulnerabilities.

Through these vulnerabilities, an attacker could iPods and iPads remote reboots and an attacker with physical access could see the home screen, even though the device was not activated. Furthermore, the same vulnerabilities resolved in Mac OS X, allowing attackers to execute arbitrary code. The same applies to AppleTV 7.1 , where a total of three leaks were patched.Finally, there is also an update for Xcode appeared, the development software from Apple for OS X and iOS. This five leaks were patched.

IOS App Scans Password And Security Of WiFi Routers

Anti-virus company Avast at the Mobile World Congress in Barcelona announced an app for iPhones and iPads that checks the security of Wi-Fi networks. The free app searches for Wi-Fi networks in the area and then determine whether they are safe. Thus, among other things, to see whether the Wi-Fi router that the wifi connection offers used weak passwords, the WiFi network is encrypted and whether vulnerabilities are present in the router that attackers can exploit.

In the case of unprotected Wi-Fi networks put the SecureMe app a secure VPN connection. Make in case users with an open Wi-Fi network connection, this VPN connection will be switched automatically. The app is free, but whether this also applies to the VPN part is unclear. Avast will first organize a beta test of the app before it appears in the App Store.