225,000 Apple account credentials stolen from jailbroken devices

Login details, purchase receipts, device IDs and other data were stolen via malware

Doug Bolton
Monday 31 August 2015 20:06 BST
Comments
The credentials of thousands of Apple users were stolen in the hack
The credentials of thousands of Apple users were stolen in the hack (Sean Gallup/Getty Images)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

More than 225,000 Apple accounts have been stolen from users of jailbroken Apple devices in a huge malware attack.

Researchers for Weiptech and Palo Alto Networks revealed the account credentials were stolen through malware distributed via Cydia, a popular jailbreaking tool.

Jailbreaking is the practice of bypassing the software restrictions on devices, which is there for security reasons or to purposely limit the software.

For example, Apple only allows you to install apps on its devices from their official App Store, allowing them to screen and control how users can use their devices. By jailbreaking your device, you can run a range of different applications on it that may not have been officially approved by Apple.

Jailbreaking can allow you to do cool things with your phone, but leaves you much more vulnerable to hackers - as the owners of these 225,000 accounts have learned.

The Malware, called KeyRaider, uploaded the login information to a separate server.

As reported by The Next Web, the researchers who discovered the breach managed to hack into this server, and downloaded around half of the entries until they were cut off

KeyRaider stole not only login details, but purchasing receipts, device IDs and a host of other data without the users' knowledge.

While it was a big security breach, the hack poses no risk to the majority of Apple users who have not jailbroken their devices.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in