New Malicious Charger Can Hack iPhone In Less Than A Minute

A new bogus charger may be able to insert malicious code into iPhones. A group of researchers from the Georgia Institute of Technology say they've developed a charger that can also surreptitiously install malware on the Apple phone, allowing potential attackers to hack in.

It's a scary thought-after all, people borrow friend's chargers, buy new ones from non-Apple sources, and so on. Now, any of these could potentially be contaminated.

"Despite the plethora of defense mechanisms in iOS, we successfully injected arbitrary software into current-generation Apple devices running the latest operating system (OS) software," the group said.

Using the fake charger, the Georgia Institute of Technology team managed to infect a phone with a virus in less than a minute.

If your device is jailbroken, or it's not, it  won't matter, they say. "All users are affected, as our approach requires neither a jailbroken device nor user interaction."

The charger works with Beagle Board hardware, which is a $45 open-source single-board computer. They chose the BeagleBoard in part to demonstrate how simple building chargers that look innocent enough to trick most users would be.

The researchers, Billy Lau, Yeongjin Jang and Chengyu Song, used the BeagleBoard to communicate with the target computer and attack by loading malicious code. The team says they hid the application by using the same method Apple uses to conceal the location of its own apps on iOS devices.

The team says they have reached out to Apple and can recommend how they could patch the vulnerability they uncovered.

They shared few other details, but the team plans to reveal the device at the annual security conference Black Hat, held in Las Vegas at the end of July.

Tags
world news
Join the Discussion

Latest Photo Gallery

Real Time Analytics