Security company Elcomsoft claims to be able to extract data from any iPhones or iPads with processors A7 through A 11 and with iOS 12 to 13. This is a pretty bold statement considering it covers a lot of equipment.
Elcomsoft sells tools to law enforcement agencies to gain access to locked iPhones. The tool, which sells for 1000 dollars, can extract email accounts and their authentication credentials, thanks to a flaw in A processors.
This glitch, known as “checkm8”, allows users to jailbreak iPhones. However, it also allows criminals or, in this case, security companies, to access data on equipment quite easily.
Equipment affected by this failure
- iPhone 5s
- iPhone 6
- iPhone 6s
- iPhone SE
- iPhone 7
- iPhone 7 Plus
- iPhone 8
- iPhone 8 Plus
- iPad Mini 2
- iPad (2018)
- iPad Pro (1st generation)
- iPad Pro 10 5
Date can be extracted even after restarting iPhone
The safest state of iPhone is known as BFU (Before First Unlock), ie before the first unlock. This is when iPhone was turned on or restarted and asks for the pass. Almost all mobile phone content is encrypted until the user enters the pass. This is a security measure that Apple is very proud of.
However, the Elcomsoft tool can get around this system because not everything is encrypted on the iPhone before unlocking. The company found that certain email authentication credentials are available before the first unlock.
As such, Elcomsoft was able to easily test the tool and find that it can extract some data from unlocked iPhones. Although the company appears to be the sole owner of this tool, skilled criminals can easily create equal tools for more harmful purposes.
4gnews editors recommend:
- Apple is developing satellite technology. Understand why
- Huawei P 40: Images show a bit of the design of the future smartphone
- Huawei P 30 Lite (2020) will be coming soon to Europe!
The post Caution! Failure in Apple Processors Allows Passwords and Email Theft appeared first on My Blog.
source https://www.wemusicz.tk/caution-failure-in-apple-processors-allows-passwords-and-email-theft/
0 Comments