A hacker group (Turkish Criminal Family), which is a very ruthless name by a hacker group demand ransom for "300 million login credentials of icloud.com, me.com, mac.com or 600 million not to be published, you can pay with Bitcoin / Ethereum, equivalent to $ 75,000 or iTunes gift cards worth for $ 100,000. Apple is threatened, If they do not pay, delete the information stored on apple devices by resetting the iCloud account .

Joseph Cox journalist who is familiar with in illegal intrusion of Motherboard data reported by the reporter. There are a lot of openings in 300 million cases and 600 million cases, but since it is 500 million in Yahoos' hack that made the world' s troubled, it 's about the same size or more. About motivation, Hacker says "I just want money," and sells information to the press as “if it is an Apple customer I'd like to know such information leaks".

Public relations activities are important to increase threat pressure. In this way, it is dark when I think whether it is made to carry a one-shot of intimidation at the time of writing, but if hacking was true, It would rather challenge, so that it would be worse for the rest of the life.

Mail exchange between Apple and a hacker

Under the Cox reporter, a screen shot of the mail exchange with the Apple security team has also been sent. Also taught you how to access the account that was said to be used for interactions so entering there, it is likely that there are e-mails of people who seem to be employees of the Apple domain. I am requesting a hacker to show a sample of the stolen dataset.

The group of hackers released the video on YouTube, showed how to break into the user's iCloud account, browse the backup photos and erase the data in the terminal.

Apple denies

Apple, on the other hand, asks for deletion of the video and replies "I will not pay for cybercrime". Well, this is not the real thing of the mail, but it is unknown whether it is genuine or not because it can only be confirmed with a screenshot.

In addition, on 23rd, the announcement of the official opinion that "The list of e-mail addresses and passwords that said they hacked was a mass leak from services of other companies, Apple's servers were not invaded." Well, the amount of intimidation is also small, it is strange that the list is circling in plaintext, and it was just threatening and diverting such a past list.

However… Just when ZDNet examined 54 combinations of e-mail addresses and passwords obtained from hacker group on iCloud, it seems they were all effective?

When all the members contacted the pants, most of them were not using the iMessage anymore, but the ten people got in touch with us normally and the passwords also agreed. Everyone changed their password. The following points are common to all.

What I care about is whether leaks from external sites as Apple says. About this, most people answered that they were using the same passwords and meads at multiple sites. However, there are three people who said that only iCloud is using this combination.

Two of them answered that someone is trying to reset the password in the last few days. It seems that you noticed that the notification arrives.

That's why it seems that the truth is mixed with hacker's saying as well. Maybe this one may be only 600 million pieces, I do not know. If you are concerned, let's set password reset and 2 step authentication.

Topics