Hacked iPhone cables let crooks completely hijack your gadgets – and there’s NO way to tell if you’ve got one without breaking it open
HACKERS have created rogue iPhone cables that can give them complete access to your gadgets.
The cables look identical to a standard Apple ones – but they’re cleverly disguised tools designed to hijack your computer, online accounts and more.
The dodgy cables were created by a hacker known as MG, and were revealed at last week’s Def Con cybersecurity conventon.
And they give complete control of your computer, letting hackers steal your logins, raid your bank and more.
“It looks like a legitimate cable and works just like one,” said MG, speaking to Vice.
“Not even your computer will notice a difference – until I, as an attacker, wirelessly take control of the cable.”
He added: “It’s like being able to sit at the keyboard and mouse of the victim but without actually being there.”
The so-called O.MG Cable won’t hack your iPhone, but it will take over a PC if plugged in.
Hackers would try to swap out your cable for the O.MG Cable without you noticing – then run riot with your PC.
Security researcher MG said he created the implant in his kitchen, and then integrated it into a cable.
And he plans to sell the O.MG Cable for as little as $200 (£165).
Right now, hackers need to be within a few hundred feet of you to access your device.
But it’s possible to extend this range infinitely, with the right tools.
“I’m currently seeing up to 300 feet with a smartphone when connecting directly,” MG told Vice.
“But the cable can be configured to act as a client to a nearby wireless network.
“And if that wireless network has an internet connection, the distance becomes basically unlimited.”
MG said he now plans to try and compromise other cables, creating hacked versions of charging leads for non-Apple devices.
We spoke to Javvad Malik, a cyber-expert at KnowBe4, who warned that the hack poses big risks to victims.
“This is an interesting attack and one to be aware of, especially for high-value targets,” Javvad explained.
“But it does have its limitations. Firstly, there is the cost involved in obtaining or creating a physically modified cable, then it is the matter of getting the cable to the intended recipient.
“It’s likely something that will be limited to very targeted attacks, such as swapping out a CEO’s legitimate cable with a fake one.
“One could conceive this being placed in a public place, such as an airport charging station, but it’s probably easier for willing attackers to compromise public WiFi connections by setting up their own rogue hotspots.”
How to spot if your cable is hacked
Here's what you need to know...
- The bad news is that these cables appear identical to a regular Apple one
- This makes trying to tell it apart from a genuine “safe” cable very difficult
- “It may not be possible for the average person to tell whether a cable has been modified,” said Javvad Malik, a cyber-expert at KnowBe4 speaking to The Sun
- “So when in doubt, or when travelling, it may be worth using a ‘usb condom’ which, when used, blocks any data transfer, and only allows charging of a device”
- It’s also a good idea to avoid purchasing cables from untrusted vendors – and may be worth sticking to the cable you received in your iPhone box
- Of course, this won’t stop crooks from trying to swap your cable out when you’re not paying attention
Apple recommends only using accessories that Apple has certified, and that come with the “Made for Apple” badge.
“To identify counterfeit or uncertified cables and accessories, look carefully at the accessory’s packaging and at the accessory itself,” Apple explains.
“Certified third-party accessories have the MFi badge on their packaging.
“An Apple Lightning to USB cable has “Designed by Apple in California” and either “Assembled in China,” “Assembled in Vietnam,” or “Indústria Brasileira” on the cable about seven inches from the USB connector.
“You’ll see a 12-digit serial number at the end of this text.
“A certified, third-party Lightning to USB cable usually has company branding on the Lightning-connector end.”
MOST READ IN TECH
In related news, Apple has offered a $1million “bug bounty” to anyone who can hack an iPhone.
Hackers are now using taped-up glasses to trick the iPhone’s Face ID sensor.
And more positively, we’ve revealed our release date prediction for the rumoured iPhone 11.
Would this put you off buying a third-party iPhone charger? Let us know in the comments!
We pay for your stories! Do you have a story for The Sun Online news team? Email us at tips@the-sun.co.uk or call 0207 782 4368 . We pay for videos too. Click here to upload yours.