FYI: arrest made in "Locking and Ransoming Apple Devices"
...from: http://www.macrumors.com/2014/06/09/australia-device-hackers-arrested/
Hackers Involved in Locking and Ransoming Apple Devices in Australia Arrested Monday June 9, 2014 10:37 am PDT by Juli Clover Two weeks ago, hackers hijacked several iOS and Mac devices in Australia, remotely locking them via iCloud and demanding a ransom from the owner to get the device unlocked.
"Device locked by Oleg Pliss," read the hijacker's message, along with a demand for $50 to $100. Quite a few users were affected and while early speculation suggested iCloud may have been hacked, Apple confirmedhttp://www.macrumors.com/2014/05/28/apple-denies-icloud-hack/ that iCloud was not compromised, and that hackers had instead gained access to Apple IDs and passwords, likely through other site breaches where they used similar credentials.
[australian_ios_device_hacked] The two hackers behind the attacks have now been detained by Russian authorities, reportsThe Sydney Morning Heraldhttp://www.smh.com.au/digital-life/consumer-security/hackers-who-held-apple-devices-to-ransom-detained-in-russia-20140609-zs2bm.html. The hackers - aged 17 and 23 - were detained in the course of "operational activities" by the Russian Interior Ministry, Russia's Ministry of Internal Affairs said. They are both residents of the Southern Administrative District of Moscow and one has already been tried before, it said. According to Russian site MKRUhttp://www.mk.ru/incident/2014/06/09/kibermoshenniki-shantazhirovali-rossiyan-poluchaya-virtualnyy-dostup-k-ikh-smartfonam-i-planshetam.html [Google Translatehttp://translate.google.com/translate?hl=en&sl=&tl=en&u=http%3A%2F%2Fwww.mk.ru%2Fincident%2F2014%2F06%2F09%2Fkibermoshenniki-shantazhirovali-rossiyan-poluchaya-virtualnyy-dostup-k-ikh-smartfonam-i-planshetam.html), the two hackers were caught after appearing on camera withdrawing a victim's ransom money from an ATM. The site also confirms the hackers gained access to Apple IDs and passwords via phishing pages and social engineering techniques, then used that information to lock devices. Russian users were also affected, which led to the investigation.
One method of obtaining login information involved a pre-owned account filled with movies and music that was sold to an unsuspecting victim. Once the person linked their own details with the account, it was vulnerable to being hijacked.
During the attacks, users who had passcodes enabled on their devices were able to bypass the hack, but those who had not previously set a passcode were out of luck, requiring a full reinstall of iOS. Apple recommends using a passcode with iOS devices, as well as two-step authentication, which can help thwart attacks like this one.
There are six "take aways" from this article is:
• The Apple iCloud service wasn't compromised;
• The Apple iOS wasn't compromised;
• Never use the same password on different Internet services. Avail yourself of the builtin in password manager ‘iCloud Keychain’ in iOS-7 to store your myriad of Internet passwords (http://support.apple.com/kb/HT5813), or purchase a solution like 1Password or LastPass;
• These guys aren't ‘hackers’ they're extortionists, taking advantage of some peoples’ proclivity to reuse passwords combined with a modicum of social engineering;
• Be sure to set your iOS passcode! http://support.apple.com/kb/HT4113?viewlocale=en_US&locale=en_US
Regards, ------------- Doug Hamilton, BA, MA, ASP Senior Computer Consultant Computers-on-Campus; Univ. of Manitoba P: 204-474-6196 F: 204-474-7556 E: Doug.Hamilton@umanitoba.ca http://www.umanitoba.ca/bookstore/computers/
On 2014/06/18, at 8:43 PM, Wayne Billing Wayne.Billing@umanitoba.ca wrote:
...from: http://www.macrumors.com/2014/06/09/australia-device-hackers-arrested/
Hackers Involved in Locking and Ransoming Apple Devices in Australia Arrested Monday June 9, 2014 10:37 am PDT by Juli Clover Two weeks ago, hackers hijacked several iOS and Mac devices in Australia, remotely locking them via iCloud and demanding a ransom from the owner to get the device unlocked.
"Device locked by Oleg Pliss," read the hijacker's message, along with a demand for $50 to $100. Quite a few users were affected and while early speculation suggested iCloud may have been hacked, Apple confirmed that iCloud was not compromised, and that hackers had instead gained access to Apple IDs and passwords, likely through other site breaches where they used similar credentials.
<australian_ios_device_hacked.jpeg> The two hackers behind the attacks have now been detained by Russian authorities, reportsThe Sydney Morning Herald. The hackers - aged 17 and 23 - were detained in the course of "operational activities" by the Russian Interior Ministry, Russia's Ministry of Internal Affairs said. They are both residents of the Southern Administrative District of Moscow and one has already been tried before, it said. According to Russian site MKRU [Google Translate), the two hackers were caught after appearing on camera withdrawing a victim's ransom money from an ATM. The site also confirms the hackers gained access to Apple IDs and passwords via phishing pages and social engineering techniques, then used that information to lock devices. Russian users were also affected, which led to the investigation.
One method of obtaining login information involved a pre-owned account filled with movies and music that was sold to an unsuspecting victim. Once the person linked their own details with the account, it was vulnerable to being hijacked.
During the attacks, users who had passcodes enabled on their devices were able to bypass the hack, but those who had not previously set a passcode were out of luck, requiring a full reinstall of iOS. Apple recommends using a passcode with iOS devices, as well as two-step authentication, which can help thwart attacks like this one.
apple-list mailing list apple-list@lists.umanitoba.ca http://lists.umanitoba.ca/mailman/listinfo/apple-list
Sorry, the sixth 'take away' is…
• Crime doesn't pay – or – crime doesn't always pay.
On 2014/06/19, at 8:59 AM, Doug Hamilton Doug.Hamilton@umanitoba.ca wrote:
There are six "take aways" from this article is:
• The Apple iCloud service wasn't compromised;
• The Apple iOS wasn't compromised;
• Never use the same password on different Internet services. Avail yourself of the builtin in password manager ‘iCloud Keychain’ in iOS-7 to store your myriad of Internet passwords (http://support.apple.com/kb/HT5813), or purchase a solution like 1Password or LastPass;
• These guys aren't ‘hackers’ they're extortionists, taking advantage of some peoples’ proclivity to reuse passwords combined with a modicum of social engineering;
• Be sure to set your iOS passcode! http://support.apple.com/kb/HT4113?viewlocale=en_US&locale=en_US
Regards,
Doug Hamilton, BA, MA, ASP Senior Computer Consultant Computers-on-Campus; Univ. of Manitoba P: 204-474-6196 F: 204-474-7556 E: Doug.Hamilton@umanitoba.ca http://www.umanitoba.ca/bookstore/computers/
On 2014/06/18, at 8:43 PM, Wayne Billing Wayne.Billing@umanitoba.ca wrote:
...from: http://www.macrumors.com/2014/06/09/australia-device-hackers-arrested/
Hackers Involved in Locking and Ransoming Apple Devices in Australia Arrested Monday June 9, 2014 10:37 am PDT by Juli Clover Two weeks ago, hackers hijacked several iOS and Mac devices in Australia, remotely locking them via iCloud and demanding a ransom from the owner to get the device unlocked.
"Device locked by Oleg Pliss," read the hijacker's message, along with a demand for $50 to $100. Quite a few users were affected and while early speculation suggested iCloud may have been hacked, Apple confirmed that iCloud was not compromised, and that hackers had instead gained access to Apple IDs and passwords, likely through other site breaches where they used similar credentials.
<australian_ios_device_hacked.jpeg> The two hackers behind the attacks have now been detained by Russian authorities, reportsThe Sydney Morning Herald. The hackers - aged 17 and 23 - were detained in the course of "operational activities" by the Russian Interior Ministry, Russia's Ministry of Internal Affairs said. They are both residents of the Southern Administrative District of Moscow and one has already been tried before, it said. According to Russian site MKRU [Google Translate), the two hackers were caught after appearing on camera withdrawing a victim's ransom money from an ATM. The site also confirms the hackers gained access to Apple IDs and passwords via phishing pages and social engineering techniques, then used that information to lock devices. Russian users were also affected, which led to the investigation.
One method of obtaining login information involved a pre-owned account filled with movies and music that was sold to an unsuspecting victim. Once the person linked their own details with the account, it was vulnerable to being hijacked.
During the attacks, users who had passcodes enabled on their devices were able to bypass the hack, but those who had not previously set a passcode were out of luck, requiring a full reinstall of iOS. Apple recommends using a passcode with iOS devices, as well as two-step authentication, which can help thwart attacks like this one.
apple-list mailing list apple-list@lists.umanitoba.ca http://lists.umanitoba.ca/mailman/listinfo/apple-list
apple-list mailing list apple-list@lists.umanitoba.ca http://lists.umanitoba.ca/mailman/listinfo/apple-list
participants (2)
-
Doug Hamilton -
Wayne Billing