How Hackers Can Get Your Passwords Using iOS Mail Bug

Apple tree has just fixed the annoying iOS Messages bug with the latest iOS viii.4 beta release. However, some other iOS bug has appeared which, if the source is to be believed, Apple is enlightened of and hasn't washed anything about.

Apple tree fixes Letters issues - iOS Mail problems arrives:

Last month saw a uncomplicated text string crashing iOS Letters apps, sometimes rebooting the device and other times preventing the user from opening the app. Apple has reportedly patched the aforementioned iOS Messages crashing bug with iOS 8.4 Beta 4.

However, information technology is another issues that is taking some deserved attention today thanks to a security researcher. January Soucek has published an iOS Mail bug on GitHub which is more disquisitional than only a device or app crash. This iOS-based bug enables hackers to steal passwords through Post pop-ups that await like iCloud prompts giving a genuine look to it.

An e-mail message is delivered to the target enabling loading of HTML content which so allows hacker to prompt user asking for their countersign or any other such sensitive information. Giving the Apple-ish look of the prompt, there'south a high chance of a targeted victim to fall for this malicious fob.

Co-ordinate to Soucek, he reported the iOS Mail bug to Apple in January but the company has remained tranquility over the upshot.

Back in Jan 2022 I stumbled upon a issues in iOS's mail client, resulting in HTML tag in email messages not being ignored. This bug allows remote HTML content to be loaded, replacing the content of the original e-mail message. JavaScript is disabled in this UIWebView, simply it is withal possible to build a functional password "collector" using simple HTML and CSS.

His latest endeavour of publishing the bug Mail service.app inject kiton GitHub might proceeds some awareness pushing Apple to take some action, security specialist hopes. Hither's the proof-of-concept video of iOS Mail bug.