iPhone 'ransomware' hack: Apple says iCloud is secure and stolen passwords are to blame
Reports of 'hijacked' iPhones down to stolen log-in details says Apple
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.Apple has responded to recent reports of iPhones being held to ransom, saying that the problem lies with stolen passwords and emails – rather than a breach in its iCloud servers.
Users posting to the company’s support forums on 26 May complained that they had been locked out of their iPads and iPhones, with on-screen messages from hackers demanding that they pay a fee in order to regain control of their device.
The hacker or hackers apparently gained access to users’ iCloud account (Apple’s cloud service is primarily used for syncing data between mobile devices and desktops) and used it turn on ‘Find My iPhone’, a piece of software designed to let users lock and wipe their devices remotely if they’re stolen.
Most of the reports came from Australia, suggesting that a geographically specific phishing attack (a fake email used to trick users into giving up their passwords) had stolen users' passwords, which has been re-used by Apple owners for iCloud.
Apple issued a statement after the reports, saying: “Apple takes security very seriously and iCloud was not compromised during this incident. Impacted users should change their Apple ID password as soon as possible and avoid using the same user name and password for multiple services.
“Any users who need additional help can contact AppleCare or visit their local Apple Retail Store,” the iPhone-maker added.
PayPal has also said that it would refund anyone who had paid the ‘ransom demands’, although it also mentioned that there was no account associated with the email address that showed up on hacked devices. This suggests that the real aim of the scam might have been to collect individuals' financial details - rather than the ransom money.
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments