View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Networks
August 1, 2013

Apple issue update to combat fake charger hacks

Apple updates software after virus in fake charger hacks iPhone 5 in 60 seconds

By Claire Vanner

Apple has encountered a wave of problems over the past month from fake chargers for their devices.

Last month there were reports of electrocution and now there are reports that data-stealing apps are being uploaded onto handsets from the bogus chargers.

A malicious code programmed into the chargers can upload a virus onto the devices plugged into them, compromising the iOS devices in as little as 60 seconds.

Apple’s pending update warns users to be sure they are using a trusted charging point when they plug in.

At the Black Hat cyber security conference in Las Vegas earlier this week, researchers from Georgia Tech’s Information Security Center demonstrated how the malicious chargers worked.

A three-square-inch BeagleBoard computer within the charger casing contained a fake iOS app with a Trojan virus that was uploaded to an iPhone 5.

The virus then steals data from the phone by taking screenshots and stimulating button touches before sending the data to a remote server.

Content from our partners
Unlocking growth through hybrid cloud: 5 key takeaways
How businesses can safeguard themselves on the cyber frontline
How hackers’ tactics are evolving in an increasingly complex landscape

The trio of researchers, Billy Lau, Yeongjin Jang, and Chengyu Song, also demonstrated how the virus-infected charger could delete the user’s Facebook app and reinstall an infected version in the same location on the user’s screen.

They also successfully forced the compromised handset to remotely dial one of their phones.

The hack only works with iOS devices; Android-powered gadgets are immune to the bogus chargers.

"Devices running Google’s Android operating system are not vulnerable to the same types of attack because they warn users if they plug devices into a computer, even one posing as a charging station," Lau told The Sydney Morning Herald.

Lau, Jang and Song gave some details about their attack in June, prompting Apple to prepare an update for devices running version seven of its iOS operating system.

The update is currently part of the beta release for iOS 7. The final version of iOS7 will be released in the Autumn. The update asks users if they are sure they can trust the device they are using to charge their phone or tablet.

Apple is also currently probing an electrocution report after a 23-year-old woman was killed in China by an eclectic shock from answering her iPhone 5 while it was charging.

Apple has since issued instructions on its Chinese website on how to identify fake chargers.

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how New Statesman Media Group may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.
THANK YOU