Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Key Raider iOS Malware: How to Keep Yourself Safe

Summary: Unit 42 published an analysis of KeyRaider, an iOS malware family that attackers used to steal more than 225,000 Apple accounts, targeting only jailbroken devices primarily through Chinese websites and apps serving jailbroken phones. WeipTech recovered roughly half of the stolen accounts through a query service before the attacker fixed the vulnerability, and Unit 42 advises affected users to delete infected dylib and plist files, reboot, change their Apple account password, and enable two-factor authentication.

Key Takeaway: More than 225,000 Apple accounts were taken through a channel that only existed because users removed Apple's built-in protections, and the recovery service reached only about half of them before the attacker closed the hole. For a security leader, the exposure is jailbroken devices on the corporate perimeter, where a standard Apple password reset will not rescue a device held for ransom.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related