Your iCloud Account Can Easily Be Hacked With a Little Info and a Call to Apple

Your iCloud Account Can Easily Be Hacked With a Little Info and a Call to Apple

Posted by · 63408 views · Translate
Wired's Mat Honan has posted a lengthy report on how his iCloud account was recently hacked by a simple, and easily duplicated, phone call to Apple.

It turns out that all you need is a billing address and the last four digits of a credit card to get Apple to reset an account password, and these details are easier to obtain than you might think.

Apple tech support confirmed to me twice over the weekend that all you need to access someone's AppleID is the associated e-mail address, a credit card number, the billing address, and the last four digits of a credit card on file. I was very clear about this. During my second tech support call to AppleCare, the representative confirmed this to me. "That's really all you have to have to verify something with us," he said.

Apple spokesperson Natalie Kerris told Wired, "Apple takes customer privacy seriously and requires multiple forms of verification before resetting an Apple ID password. In this particular case, the customer's data was compromised by a person who had acquired personal information about the customer. In addition, we found that our own internal policies were not followed completely. We are reviewing all of our processes for resetting account passwords to ensure our customers' data is protected."

Today, Wired tried to use the hacker's technique themselves. They were successful.

Briefly, here's how the hacker was successful in this case. At Honan's website he found his gmail address. Using gmail's password recovery page he was shown enough of his @me.com address to decipher the full username. Then Honan's billing address was found via a whois of his website's domain. The hacker then contacted Amazon and added a fake credit card to Honan's account. Next the hacker contacted Amazon again and added a new email address to the account using the fake credit card as authorization. Using the new email account he requested a password reset and gained access to see the last four digits of all cards on file. Finally, the hacker called Apple with the email address, billing address, and last four digits of the credit card to have Apple support reset the password.

While this may seem a bit lengthy of a procedure, a delivery person could do the same without going through any of those hoops.

You can find the full story at the link below...

Read More


Your iCloud Account Can Easily Be Hacked With a Little Info and a Call to Apple
Imelda Daher - June 24, 2016 at 7:06am
Hey guys, my name is Imelda Daher from Philippines but reside in America i am very happy that i was able to be online last week when Janet posted on YouTube that she has finally gotten what she wanted for her marriage life after all the stress she went through trying to hack into our husbands phone herself.. So after that I decided to try and see if it’s gonna work or still the same thing I see online everyday so I contacted Michael as i was referred to by Janet to his email which I did and got his direct telephone number as well too and believe me he did a good job for me that I was shocked when I got the information I needed that my dear husband for 10 year of marriage has a baby mama in Sweden. thanks to Michael Lawson for this great job even if it’s gonna break my home its better than been fooled for the rest of my life. lawsonmichael33@yahoo.com by Janet and he did a good and fast job for me in less than 48hrs...he made available phone hack, chat histories, present chats and futur
jerome moral - March 14, 2014 at 2:39pm
sir plss help me .. my iphone 4s needs to bypass to icloud activation.. i forgot my apple id and password.. i'm seconhand user sir.. GB.
Anna Groth - July 26, 2014 at 12:56pm
I bypass the iCloud activation screen lock on my iPhone 5c whit the hack tool from this page www.bypassicloudactivationlock.net . Good luck
Dicky - January 17, 2014 at 6:56am
i could made, it possibility to broke, that it not the purpose, to make moore perfect technology for any corporation who claimed them best one
James hoyland - August 22, 2012 at 5:25am
ALL THIS HACKING IS A LOAD OF BOLLOX AND THESE HACKERS ARE FAKE AS FUCK AND WEAK AS FUCK THEY THINK THEY KNOW EVERYBODY'S ACCOUNT PASSWORDS WHEN THEY DON'T PLUS THEY ASLO THINK THERE BIG AND HARD AND BETTER THAN EVERYBODY ELSE BUT THEIR NOT THIS FAKE HACKIN HAS GOT TO STOP AND IT STOPS RIGHT NOW BEFORE SOMEONE CALLS THE POLICE AND TRACKS DOWN WHO THE HACKERS ARE ABD THEY WILL ARREST THEM AND PUT THEM IN JAIL TILL THEY LEARN THEIR LESSON.
6 More Comments
Recent