class= "Post_content" itemprop= "Articlebody" >
At the upcoming Black Hat security conference at the end of July, three researchers from the Georgia Institute of Technology will show a "proof-of-concept" charger that can secretly install malware on Apple's IOS device .....
The Black Hat security assembly is one of the world's most important IT security conferences, with many security vendors such as Cisco, RSA, Microsoft, Qualys and IOActive, as well as independent security researchers, who have published their latest research results at the conference.
Three researchers did not disclose the details of the charger, but they said on the website that the results of the experiment were frightening and should be brought to the attention of people.
"Although IOS has multiple defenses, we have successfully injected malicious code into the device running the latest iOS system," they said. All IOS users are affected because our approach does not require it to be a ' jailbreak ' device, nor does it require user intervention. ”
The charger, known as "Mactans" (which seems to refer to the name of the ' Black Widow spider '), was developed based on the "BeagleBoard" of open source monolithic computers. BeagleBoard is sold by Texas Instruments with a retail price of 45 dollars. "The choice is to prove that it is not difficult to embed malware in a bland USB charger," says three researchers. ”
Industry insiders said that the effectiveness of the charger is not yet confirmed, because the 3-inch square BeagleBoard microcontroller can not be embedded in the small Apple power adapter, but it is possible to embed into the base or external power supply.
Three of researchers also hinted that more resources are needed to further refine their research results. "There is limited time and money to develop Mactans, and we have thought that peers with greater ambitions and more money may be able to further refine the system," they said. ”
Yeongjin Jang, one of the researchers, said they had told Apple about the findings but had not yet received a response from Apple.
In less than a minute, three researchers said, they could use the charger to hack into devices that carry the latest version of the IOS system. They also said that the malware infection lasted a long time and was difficult for users to detect.
This is not the first time researchers have used USB cables to invade IOS devices. For example, a hacker group released the perfect jailbreak tool evasi0n this February, using 5 of vulnerabilities, including IOS mobile backup systems, to destroy Apple's security mechanisms.