Translate

Tuesday, 4 September 2012

Hackers Leak 1 Million iOS Device UDIDs Obtained During FBI Breach

The AntiSec hacking group has released more than 1 million Unique Device Identifiers (UDIDs) from Apple's iOS devices last night.
The hackers claim that the UDIDs were obtained after breaching an FBI computer, which had over 12 million records that included personal information such as user names, push notification tokens, cell phone number and addresses.
The hackers have issued the following statement:
During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of ”NCFTA_iOS_devices_intel.csv” turned to be a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zipcodes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incompleted on many parts. no other file on the same folder makes mention about this list or its purpose.
The hackers have published the UDIDs to alert the public that, in their words: 
"FBI IS USING YOUR DEVICE INFO FOR A TRACKING PEOPLE PROJECT".
It is not clear how the FBI agent managed to get access to the information. It is quite possible that the information was obtained from an app developer or developers as data such as APNS (push notification) Tokens is typically collected by developers to deliver push notifications to users.
At the moment, you can download the file from this webpage to find out if your iOS device's UDID was included in the list.
It is also not clear if the leaked information can be used in any manner at this point of time.  We'll keep you posted as soon as we get any more details.

Tip: To find the UDID of your iOS device, connect your iOS device to your Mac and launch iTunes. In iTunes, select your iOS device in the ‘Devices’ section and navigate to the Summary tab. Click on theSerial Number label, this will show the Identifier field and the 40 hex character UDID. Press Command+C (Windows users - Ctrl + C) to copy the UDID to your clipboard.
Image via Fortune

No comments:

Post a Comment

LinkWithin

Related Posts Plugin for WordPress, Blogger...