Hackers Used Government Spyware to Data-rob iCloud
Apparently, according to Apple, this wasn't a breach; there was no break-down in the security system for the company's giant storage service. Instead, the hackers used what is called a
"brute force attack" -- a password-guessing method that uses software readily available to hackers to guess and test passwords to access a private account.
In the last couple of days, however, experts have become almost sure that the software used to capture the iCloud user data is a program designed for use by police and government surveillance. The program is called
EPPB or Elcomsoft Phone Password Breaker and it's made by a Russian outfit called Elcomsoft. Elcomsoft specializes in selling it to government authorities but it will sell it to anyone willing to pay the price. Apparently these hackers got a hold of that program and maybe, indeed, have done so through legal purchase.
The scenario goes like this: a hacker uses a program called iBrute which is a brute-force password guessing program for the iPhone. Yeah, there is actually such a program. It's available free on line. With that, you can acquire certain types of information. But if you manage to get the user's password with iBrute, you can then use EPPB to capture the user's entire storage -- everything they have on the iCloud and nobody will know.
more
Hackers Used Government Spyware to Data-rob iCloud | This Can't Be Happening!