AirDrop was introduced in iOS 7, which allows Apple users to transmit files between iOS and macOS systems. Moreover, this does not require an internet connection or a phone book contact for the receiver to receive files.
However, it has been reported that malicious actors have abused this feature to share illegal pictures, videos, audio, and other files in crowded places like subways, buses, or shopping malls. Due to its anonymity, it is difficult for law enforcement authorities to track these threat actors.
Document
@import url('https://fonts.googleapis.com/css2?family=Poppins&display=swap');
@import url('https://fonts.googleapis.com/css2?family=Poppins&family=Roboto&display=swap');
*{
margin: 0; padding: 0;
text-decoration: none;
}
.container{
font-family: roboto, sans-serif;
width: 90%;
border: 1px solid lightgrey;
padding: 20px;
background: linear-gradient(2deg,#E0EAF1 100%,#BBD2E0 100%);
margin: 20px auto ;
border-radius: 40px 10px;
box-shadow: 5px 5px 5px #e2ebff;
}
.container:hover{
box-shadow: 10px 10px 5px #e2ebff;
}
.container .title{
color: #015689;
font-size: 22px;
font-weight: bolder;
}
.container .title{
text-shadow: 1px 1px 1px lightgrey;
}
.container .title:after {
width: 50px;
height: 2px;
content: ' ';
position: absolute;
background-color: #015689;
margin: 20px 8px;
}
.container h2{
line-height: 40px;
margin: 2px 0;
font-weight: bolder;
}
.container a{
color: #170d51;
}
.container p{
font-size: 18px;
line-height: 30px;
}
.container button{
padding: 15px;
background-color: #4469f5;
border-radius: 10px;
border: none;
background-color: #00456e ;
font-size: 16px;
font-weight: bold;
margin-top: 5px;
}
.container button:hover{
box-shadow: 1px 1px 15px #015689;
transition: all 0.2S linear;
}
.container button a{
color: white;
}
hr{
/ display: none; /
}
Free Webinar
Fastrack Compliance: The Path to ZERO-Vulnerability
Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month. Delays in fixing these vulnerabilities lead to compliance issues, these delay can be minimized with a unique feature on AppTrana that helps you to get “Zero vulnerability report” within 72 hours.
Register for Free
Case Review
According to the reports , several people in the Beijing subway received video files with inappropriate remarks through unknown Air Drops.
Case Review (Source: Beijing Wangshendongjian) Initial investigations revealed that due to its anonymity , the malicious actor utilized the AirDrop function to transfer these files to victims. However, one of the victim devices that received an unknown Airdrop was analyzed.
After several attempts, researchers found the logs for Airdrop and analyzed them further. The recorded information was found to contain the fields sender device name, mobile number, and email address, all of which were in a hash value.
Cracking the Hash
To crack the hash values, the researchers created a rainbow table with mobile numbers and email accounts to convert the hash value into original text.
Evidence collection and Traceability (Source: Beijing Wangshendongjian) Eventually, the hash values were cracked, revealing the threat actors’ mobile phone numbers and email accounts. This information was quickly shared with the law enforcement authorities, who used it to track down several suspects involved in this case.
It is recommended that people turn off their AirDrop receiving when not in use, which will prevent these kinds of activities from threatening actors.
Try Kelltron’s cost-effective penetration testing services for free to assess and evaluate the security posture of digital systems
The post Apple AirDrop Hacked by China to Gain Access to Private Information appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform .
