Your iCloud Account Can Easily Be Hacked With a Little Info and a Call to Apple

Your iCloud Account Can Easily Be Hacked With a Little Info and a Call to Apple

Posted by · 62731 views · Translate
Wired's Mat Honan has posted a lengthy report on how his iCloud account was recently hacked by a simple, and easily duplicated, phone call to Apple.

It turns out that all you need is a billing address and the last four digits of a credit card to get Apple to reset an account password, and these details are easier to obtain than you might think.

Apple tech support confirmed to me twice over the weekend that all you need to access someone's AppleID is the associated e-mail address, a credit card number, the billing address, and the last four digits of a credit card on file. I was very clear about this. During my second tech support call to AppleCare, the representative confirmed this to me. "That's really all you have to have to verify something with us," he said.

Apple spokesperson Natalie Kerris told Wired, "Apple takes customer privacy seriously and requires multiple forms of verification before resetting an Apple ID password. In this particular case, the customer's data was compromised by a person who had acquired personal information about the customer. In addition, we found that our own internal policies were not followed completely. We are reviewing all of our processes for resetting account passwords to ensure our customers' data is protected."

Today, Wired tried to use the hacker's technique themselves. They were successful.

Briefly, here's how the hacker was successful in this case. At Honan's website he found his gmail address. Using gmail's password recovery page he was shown enough of his @me.com address to decipher the full username. Then Honan's billing address was found via a whois of his website's domain. The hacker then contacted Amazon and added a fake credit card to Honan's account. Next the hacker contacted Amazon again and added a new email address to the account using the fake credit card as authorization. Using the new email account he requested a password reset and gained access to see the last four digits of all cards on file. Finally, the hacker called Apple with the email address, billing address, and last four digits of the credit card to have Apple support reset the password.

While this may seem a bit lengthy of a procedure, a delivery person could do the same without going through any of those hoops.

You can find the full story at the link below...

Read More


Your iCloud Account Can Easily Be Hacked With a Little Info and a Call to Apple
Reputable Hacker - April 19, 2016 at 5:02pm
ReputableHacker Is An Experienced Online Private Investigator/Ethical Hacker Providing Communication Solutions And Related Services To Individuals. You may find my services of use, my areas of expertise include the following: 1. FIDELITY CHECK - Find Out If Your Spouse Or Partner Is Cheating On You 2. MOBILE COMMUNICATION ACCESS - Get Unrestricted Access To Mobile Phones; Whatsapp, Text Messages, Call Logs. 3. SOCIAL MEDIA ACCESS - Facebook, Twitter, Instagram, Snapchat, etc. 4. EMAIL ACCESS - Get Password To Any Email 5. COLLEGE & UNIVERSITY - Change Of Grades, Upgrade Of Certificates & Personal Information, Getting Examination Questions. 6. CLEAN SLATE - Delete Criminal Records, Adjust Credit Reports 7. WEBSITES & DATABASE CONTACT: reputablehacker@gmail.com
roseann - January 8, 2016 at 1:46pm
The only truthful hacker I have met is tracktechnet@gmail.com the guy is a genius, he has helped me and my friends to solve our relationship issues, he also accesses and modify databases, any social account, he is the real deal. Contact tracktechnet@gmail.com if you are in need of a good hacker. I vouch for him...
jerome moral - March 14, 2014 at 2:39pm
sir plss help me .. my iphone 4s needs to bypass to icloud activation.. i forgot my apple id and password.. i'm seconhand user sir.. GB.
Anna Groth - July 26, 2014 at 12:56pm
I bypass the iCloud activation screen lock on my iPhone 5c whit the hack tool from this page www.bypassicloudactivationlock.net . Good luck
Dicky - January 17, 2014 at 6:56am
i could made, it possibility to broke, that it not the purpose, to make moore perfect technology for any corporation who claimed them best one
7 More Comments
Recent