WARNING: This Black Box Can Brute Force Crack Your iPhone Passcode [Video]

WARNING: This Black Box Can Brute Force Crack Your iPhone Passcode [Video]

Posted by · 26361 views · Translate

A device known as an IP Box has been successful in bruteforce cracking the iOS screenlock passcode resulting in major security implications for iPhone and iPad users, reports MDSec. The box can be purchased online for around $200.

Although we’re still analyzing the device it appears to be relatively simple in that it simulates the PIN entry over the USB connection and sequentially bruteforces every possible PIN combination. That in itself is not unsurprising and has been known for some time. What is surprising however is that this still works even with the “Erase data after 10 attempts” configuration setting enabled. Our initial analysis indicates that the IP Box is able to bypass this restriction by connecting directly to the iPhone’s power source and aggressively cutting the power after each failed PIN attempt, but before the attempt has been synchronized to flash memory. As such, each PIN entry takes approximately 40 seconds, meaning that it would take up to ~111 hours to bruteforce a 4 digit PIN.

MDSec has confirmed that the device works on iOS 8.1 but has yet to test it on iOS 8.2. Their research suggests that this could an issue detailed by Apple in CVE-2014-4451.

Take a look at the video below and please follow iClarified on Twitter, Facebook, Google+, or RSS for updates. If you are concerned about the security of your device, we strongly recommend you follow these instructions to Set a Complex Alpha Numeric Passcode on Your iPhone.

Read More [via Intego] [via Alex]

Hataz - March 19, 2015 at 3:06pm
It's funny all those saying "whos going to let someone plug their phone in for X amount". Well have you thought this could be used for people who have gotten their phone stolen with all the amount of info on their device. Also the option to disable "simple passcode" is nothing new on idevices, its just default setting having simple passcode (4-digit code) on. "Complex Password" setting: passwords with alphabet characters and numbers has been part of iOS since iOS4.
Alien - March 19, 2015 at 1:50pm
Very OLD news... MFC Dongle is another tool that do that...
Brutus - March 19, 2015 at 8:20am
Already exist look here: https://www.iclarified.com/47845/how-to-set-a-complex-alpha-numeric-iphone-passcode-video
Brutus - March 19, 2015 at 8:10am
It will comes a new IOS update with an Alphanumeric code, so finish this yoke!.
Ginojdjdjs - March 19, 2015 at 4:06am
This is 5 months old.... They fabricated the cracking part. It takes longer than that meaning 0001 0002 etc for hours...
11 More Comments