The AntiSec hacking group has released more than 1 million Unique Device Identifiers (UDIDs) from Apple's iOS devices last night.
The hackers claim that the UDIDs were
obtained after breaching an FBI computer, which had over 12 million
records that included personal information such as user names, push
notification tokens, cell phone number and addresses.
During the
second week of March 2012, a Dell Vostro notebook, used by Supervisor
Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team
and New York FBI Office Evidence Response Team was breached using the
AtomicReferenceArray vulnerability on Java, during the shell session
some files were downloaded from his Desktop folder one of them with the
name of ”NCFTA_iOS_devices_intel.csv” turned to be a list of 12,367,232
Apple iOS devices including Unique Device Identifiers (UDID), user
names, name of device, type of device, Apple Push Notification Service
tokens, zipcodes, cellphone numbers, addresses, etc. the personal
details fields referring to people appears many times empty leaving the
whole list incompleted on many parts. no other file on the same folder
makes mention about this list or its purpose.
The hackers have published the UDIDs to alert the public that, in their words:
"FBI IS USING YOUR DEVICE INFO FOR A TRACKING PEOPLE PROJECT".
It is not clear how the FBI agent
managed to get access to the information. It is quite possible that the
information was obtained from an app developer or developers as data
such as APNS (push notification) Tokens is typically collected by
developers to deliver push notifications to users.
At the moment, you can download the file from this webpage to find out if your iOS device's UDID was included in the list.
It is also not clear if the leaked
information can be used in any manner at this point of time. We'll keep
you posted as soon as we get any more details.
[AntiSec via The Next Web]
Tip: To find the UDID
of your iOS device, connect your iOS device to your Mac and launch
iTunes. In iTunes, select your iOS device in the ‘Devices’ section and
navigate to the Summary tab. Click on theSerial Number label,
this will show the Identifier field and the 40 hex character UDID. Press
Command+C (Windows users - Ctrl + C) to copy the UDID to your
clipboard.
Image via Fortune
No comments:
Post a Comment