Apple's 40 Million iCloud Accounts Might Be Held Hostage by Russian Ransomware

Apple security features for their software and device are outstanding, it’s very difficult to hack in to it. Apple’s iPhone have an iCloud feature, which is also an additional security for the device. Owners of any Apple iPhone must have an iCloud account in order to add this security feature to the device.

According to CSO online, Apple’s iCloud account seems to be hacked by some urbane hackers that makes the iPhone being hostage by Russian ransomware. Also, they add that about 40 million iCloud account rumored to be at risk.

Back in the February, some iPhone users discovers that their iPhone have been held hostage by some Russian hackers. The attack is almost too simple.

Apple’s iCloud account is broken to (with the help of broken credentials) and the feature “Find My iPhone.”

According to Salted Hash, blog of CSO “It starts with a compromised Apple ID. From there, the attacker uses Find My iPhone and places the victim’s device into lost mode. At this point, they can lock the device, post a message to the lock screen and trigger a sound to play, drawing attention to it.

In each of the cases reported publicly, the ransom demanded is usually $30 to $50. If a victim contacts the referenced email address, in addition to payment instructions, they’re told they have 12 hours to comply or their data will be deleted.”

A security professional posted a message to a private email group requesting the information related to a possible compromised 40 million iCloud account, earlier on this week.

CSO’s blog Salted Hash starts to excavate the story after the email was received. In it, a list of members questioning the others about the truth of the rumor concerning “rumblings of a massive (40 million) data breach at Apple.”

The message tells that alleged breach was carried out by a Russian actor, “seems to be via iCloud to the ‘locate device’ feature, and is then locking the device and asking for money.”

Many security expert claims that with this magnitude of data breach it will not likely that Apple will not made any comment nor have fix this new problems. There is no way that this new problem will slip Apple’s radar. And Apple had not commented about this matter.

Source :click here