Apple 'Find My' network can be abused to steal keylogged passwords (www.bleepingcomputer.com)
from throws_lemy@lemmy.nz to cybersecurity@infosec.pub on 04 Nov 2023 15:20
https://lemmy.nz/post/3020595

#cybersecurity

threaded - newest

Lojcs@lemm.ee on 04 Nov 2023 16:48 next collapse

Apple will probably make its network secure eventually. I’m more worried about Samsung’s network that probably won’t get the same scrutiny

hemmes@lemmy.world on 04 Nov 2023 20:21 collapse

This is another example of very specific situations in INFOSEC. It’s unlikely that you will become a victim to this key logger attack. And of course the title suggests that Apple’s Find My network is compromised. This is not the case. But it is being utilized, in this instance, against Apple’s rules and regulations.

The real hack here is that the victim had their keyboard modified or was given a compromised keyboard that broadcasts Bluetooth signals, that are then picked up on the Find My network. It could be transmitted via Bluetooth, WiFi, audible sound, monitoring energy differentials, etc. It’s the HMI hardware that’s been compromised. Apple will likely develop updates to their Find My network, but the compromised keyboard could then be modified to use some other service or broadcast methods. Apple fixing the Find My network to recognize bad actors will not prevent this style of attack.

cron@feddit.de on 04 Nov 2023 20:24 collapse

True. It would be much easier to build a keyboard with a keylogger that uses a sim card and the cell network.