Sunday, February 23, 2014

Apple Devices Under Extreme Danger from "Man-in-the-Middle" Hack

by Joseph Knoop



Apple announced this last Friday that many Apple iOS applications are under threat from a "man-in-the-middle" hack, resulting in permanent manipulation of Apple devices by attackers.

Through this attack, hackers are able to gain access to users' communications, including email and login credentials.

In an email sent to Ball State University students, the university's Security Services office detailed the methods of the attackers.

"The attacker can act as a proxy being able to read, modify and insert data while in communication with an intended recipient or website being visited. Entities can impersonate a trusted website and install malware and/or steal valuable data from you."

The office's email also details the "301 HTTP Response," the method by which sites redirect traffic to a new URL. Many iOS applications use the 301 HTTP reponses, something which hackers manipulate to redirect information to their own servers.

"There's no easy way to remove the problem," the office's email says.

The Security Services office recommends Apple device users refrain from using public WiFi access points.

An updated iOS has been released for Apple phones and tablets, and can be purchased on iTunes. Apple has yet to release any updated iOS for Mac computers.

The patch has only been released for more recent iPhones, including the iPhone (4th generation and onward), iPod Touch (5th generation onward), and iPad (2nd generation onward).

Source: Ball State Security Services Office & iTunes