Hackers Claim To Have Compromised Apple’s iCloud And Activation Lock
by Brent Dirks
May 21, 2014
Hackers from the Netherlands and Morocco are claiming that they have hacked Apple’s iCloud and the Activation Lock feature of iOS 7 devices. That’s according to Dutch news outlet De Telegraff (via MacRumors.)
The pair, using the names AquaXetine and MerrukTechnolog, have reportedly unlocked more than 30,000 stolen iPhones in the last few days. The stolen devices are then sold on the black market. Other iCloud information, like passwords, may be accessed through the hack.
Activation Lock, which was introduced with iOS 7, was designed to make it more difficult for thieves to sell handsets. If an iPhone was remotely locked or wiped, users need to enter their specific Apple ID and password to reactivate the phone.
But the vulnerability apparently allows the hackers to unlock an iPhone by using a computer to mimic Apple’s own servers in what is routinely referred to as a man-in-the-middle attack.
The issue is rumored to be tied to a major SSL bug that Apple fixed with iOS 7.0.6 and Mac OS X 10.9.2. The Windows version of iTunes is apparently still affected, according to a report from iPhone in Canada.
AquaXetine and MerrukTechnolog claimed to have informed Apple of the issue back in March. Apple has yet to respond. We'll let you know when we hear any more information about this issue.
If you're interested in implementing a strong password program, definitely take a look at our AppList of Best iPad Password Keeping Apps. An AppAdvice favorite, 1Password, also received a major update back in April.