This Lightning Cable Can Steal Your Passwords

This Innocent-Looking Lightning Cable Can Steal Your Passwords and Remotely Send Them to a Hacker

Though Apple focuses rather a lot on the safety of iPhones, there are just a few industry-grade instruments that can be utilized to crack an iOS device and purchase password-protected knowledge of customers. Nevertheless, a safety researcher has developed a malicious lightning cable that you should use to file something you sort in your iPhone and ship it to a hacker remotely.

OMG! USB Cables Can Now Steal Your Passwords

Sure, you learn that proper! Dubbed OMG Cables, the standard-looking lightning cable is developed by a safety researcher who goes by the title of MG. The researcher primarily fitted a tiny, custom-made chip inside a lightning cable to create the OMG cable. MG says that the malicious implant is round half the size of a plastic shell.

This Innocent-Looking Lightning Cable Can Steal Your Passwords and Remotely Send Them to a Hacker
Picture through: Vice

The researcher not too long ago shared some attention-grabbing tidbits about his product with Vice. MG beforehand showcased earlier variations of OMG cables for Motherboard on the DEFCON hacking convention. Nevertheless, within the newest report, MG confirmed a more moderen model of the cable that is available in totally different variations, together with a Lightning to USB-C mannequin, and improved wi-fi capabilities.

“There have been individuals who mentioned that Sort C cables had been protected from one of these implant as a result of there isn’t sufficient house. So, clearly, I needed to show that incorrect,” MG informed Vice in a press release.

How Does This Cable Work?

Now, coming to the working of OMG Cables, they primarily create a Wi-Fi hotspot to which a hacker can join their system. Following a profitable connection, the hacker can use a easy net interface to amass the keystrokes of a person who makes use of one among these cables to cost their system.

So, as soon as a person connects an iPhone to an OMG Cable to cost it up, the cable will begin sending the keyboard knowledge to the hacker wirelessly. Whereas the person will stay unaware and would possibly sort their banking particulars like passwords, credit score or debit card CVVs, or every other delicate info on their system whereas their system is charging, the hacker will have the ability to purchase the info on their related system.

Moreover, the newer OMG Cables include geofencing options. This lets a person or a hacker block the payload of the system primarily based on its bodily location. This prevents the info from leaking or falling into the incorrect arms. “It pairs effectively with the self-destruct characteristic if an OMG Cable leaves the scope of your engagement and you don’t want your payloads leaking or being unintentionally run towards random computer systems,” MG additional added.

Now, for those who suppose that the OMG Cables are harmful, figuring out that MG is mass-producing these malicious cables is far scarier. Though Apple recommends utilizing MFi-certified equipment for iPhones and different Apple units, there’s a massive marketplace for non-certified, third-party equipment. So, as you may think about, this would possibly have an effect on a number of customers preferring uncertified equipment for his or her iPhones.

Therefore, for those who use non-MFi merchandise to cost your iPhone or switch knowledge, you would possibly wish to keep away from these USB cables. You may test for the MFi mark on the containers of equipment earlier than shopping for them to guard your knowledge and hold your system protected.

Featured Picture Courtesy: Vice | This Lightning Cable Can Steal Your Passwords


Inter Reviewed is an automatic aggregator of the all world’s media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials, please contact us by email – The content will be deleted within 24 hours.

Related Articles

Back to top button