AirDrop was introduced in iOS 7, which allows Apple users to transmit files between iOS and macOS systems.
This does not require an internet connection or a phone book contact for the receiver to receive files.
It has been reported that malicious actors have abused this feature to share illegal pictures, videos, audio, and other files in crowded places like subways, buses, or shopping malls.
Due to its anonymity, it is difficult for law enforcement authorities to track these threat actors.
Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month.
According to the reports, several people in the Beijing subway received video files with inappropriate remarks through unknown Air Drops.
Initial investigations revealed that due to its anonymity, the malicious actor utilized the AirDrop function to transfer these files to victims.
One of the victim devices that received an unknown Airdrop was analyzed.
Researchers found the logs for Airdrop and analyzed them further.
The recorded information was found to contain the fields sender device name, mobile number, and email address, all of which were in a hash value.
To crack the hash values, the researchers created a rainbow table with mobile numbers and email accounts to convert the hash value into original text.
Eventually, the hash values were cracked, revealing the threat actors' mobile phone numbers and email accounts.
This information was quickly shared with the law enforcement authorities, who used it to track down several suspects involved in this case.
It is recommended that people turn off their AirDrop receiving when not in use, which will prevent these kinds of activities from threatening actors.
Try Kelltron's cost-effective penetration testing services for free to assess and evaluate the security posture of digital systems.
This Cyber News was published on gbhackers.com. Publication date: Wed, 10 Jan 2024 15:13:12 +0000