Apple’s AirTag feature is a security nightmare

Stefan Mileschin · 1st October 2021, 08:08

Connects to iCloud phishing page

Security experts have discovered a flaw in Apple’s $30 AirTag which could sign people up to phishing sites.

The new $30 AirTag tracking device from Apple has a feature that allows anyone who finds one of these tiny location beacons to scan it with a mobile phone and discover its owner's phone number if the AirTag has been set to lost mode.

All sounds good, but like many things it does not appear to have been thought through. The research shows this same feature can be abused to redirect the Good Samaritan to an iCloud phishing page -- or to any other malicious website.

Setting the Air Tag to Lost Mode generates a unique URL at https://found.apple.com/ and allows the user to enter a personal message and contact phone number. Anyone who finds the AirTag and scans it with an Apple or Android phone will immediately see that uni

https://fudzilla.com/news/53628-appl...rity-nightmare

1st October 2021, 08:08	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,541	Apple’s AirTag feature is a security nightmare Connects to iCloud phishing page Security experts have discovered a flaw in Apple’s $30 AirTag which could sign people up to phishing sites. The new $30 AirTag tracking device from Apple has a feature that allows anyone who finds one of these tiny location beacons to scan it with a mobile phone and discover its owner's phone number if the AirTag has been set to lost mode. All sounds good, but like many things it does not appear to have been thought through. The research shows this same feature can be abused to redirect the Good Samaritan to an iCloud phishing page -- or to any other malicious website. Setting the Air Tag to Lost Mode generates a unique URL at https://found.apple.com/ and allows the user to enter a personal message and contact phone number. Anyone who finds the AirTag and scans it with an Apple or Android phone will immediately see that uni https://fudzilla.com/news/53628-appl...rity-nightmare

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
The best Apple AirTag accessories you can buy	Stefan Mileschin	WebNews	0	27th July 2021 08:59
Apple's AirTag tracks your items for $29	Stefan Mileschin	WebNews	0	21st April 2021 12:17
Apple removes anti-security feature	Stefan Mileschin	WebNews	0	18th January 2021 07:58
RDP continues to be security nightmare	Stefan Mileschin	WebNews	0	21st September 2019 19:14
Internal security is nightmare says survey	Stefan Mileschin	WebNews	0	11th March 2019 10:03
Yahoo mail is a security nightmare	Stefan Mileschin	WebNews	0	30th August 2018 08:50
Samsung's in-house OS is a security nightmare	Stefan Mileschin	WebNews	0	5th April 2017 14:12
How used cars became a security nightmare	Stefan Mileschin	WebNews	0	26th February 2017 20:15
Apple’s open OS is a security nightmare	Stefan Mileschin	WebNews	0	25th June 2016 20:11
Apple demos 'Activation Lock' security feature in iOS 7	Stefan Mileschin	WebNews	0	11th June 2013 09:14