The threat posed by the WireLurker malware that has been infecting Macs and iOS devices has only recently come to light, but following a tip-off from local security company Qihoo 360 Technology, Chinese authorities arrested three individuals that it suspects are behind the malware. WireLurker infected thousands of mobile devices in the country after users unwittingly installed it via a third-party app store.
A couple of days back, we reported on the so-called Masque Attack afflicting iOS, with threatening apps posing as legitimate ones in order to steal login credentials and generally wreak havoc. The fact that the United States government has issued a bulletin as something of a warning to iOS users is a testament to the severity of the problem, and with Apple concerned about the security of its platform as it well should be, the Cupertino company's support pages have been updated to offer advice to those worried about Masque.
A couple of days ago, we reported on the Masque Attack vulnerability that replaced legitimate iOS apps with those able to cause harm. Worryingly, the issue affects both jailbroken and non jailbroken devices, and as a mark of its seriousness, the United States government has issued an official warning to those running Apple's mobile software.
The annual Pwn2Own competition, held at the PacSec conference in Tokyo, is now under way. The challenge, for those willing to undertake it, is to bypass security measures and exploit a device's sandbox, with significant monetary gains to be made for the most complex, highly-rated hacks. We may only be at day one, but thus far, Pwn2Own has been an unqualified success for our hackers, with some of the most popular devices in the mobile industry having already been pwned.
iOS may have been threatened by the WireLurker malware which crawled its way into devices via Macs, but at least it was a situation which was contained till China after Apple took measures to counter it. Now we have 'Masque Attack', a new threat which replaces legitimate, App Store downloaded apps with ones loaded with malware.
Here's how you can find and remove WireLurker malware from both jailbroken and non-jailbroken iPhone, iPad or iPod touch.
Apple's fingerprint unlock technology pretty much throws the Fifth Amendment right out the window. A Circuit Judge in Virginia has ruled that the Fifth Amendment does not protect fingerprints, which has raised concerns about privacy implications this will have on biometrically protected devices, including the newer iPhones and iPads.
Instant picture messaging app Snapchat has risen to prominence over the past couple of years, establishing a niche for users who wish to share photos and short (albeit terrible quality) clips that self-destruct after a set period of time. The authors of Snapchat have come under fierce scrutiny on more than one occasion already over user privacy, and with a cache of around 13GB of snaps having leaked online, the company is pointing the finger at "illegal" third-party clients.
In a world where our smartphones and computers are under constant attack from viruses and malware, the humble USB port wasn't believed to be a particularly concerning attack vector for accessory manufacturers, and certainly wasn't on the minds of those using it. As of last July, that all changed after Karsten Nohl and Jakob Lell announced a security floor that they dubbed BadUSB.
Apple has added a section to the existing iCloud.com domain that will allow users to easily check and determine whether or not an iOS device is currently protected via the Find my iPhone Activation Lock initiative, or in other words, whether the device being sold is stolen or not. The new section is a simple Web page that allows anyone with the IMEI or serial number of an iPhone, iPad or iPod touch to check the Activation Lock status of that individual device in an effort to protect themselves against purchasing a piece of hardware that cannot be used without the original owner’s iCloud credentials.
















