Malware Targets Jailbroken iPhones, Steals Some 225,000 Apple Accounts

Here’s another reason not to jailbreak your iPhone.

Some 225,000 Apple accounts have been stolen by malicious software installed on unlocked iPhones, in what is purported to be one of the largest known thefts of its kind.

Palo Alto Networks said malicious software, which it dubbed KeyRaider, pilfered Apple account usernames, passwords and device IDs by intercepting iTunes traffic on the device.

The victims, many of whom live in China, made themselves vulnerable to attack — first by jailbreaking the device, or removing hardware restrictions on Apple’s iOS. Then, they installed an application from an unauthorized store.

A student at Yangzhou University discovered the attack earlier this summer, after he and other members of an amateur technical group began investigating reports that some users’ accounts were being used to make unauthorized purchases. By examining the various jailbreaks, they found one version that collected user information and uploaded it to a suspicious site.

At least one security analyst dubbed the breach a non-issue that touches a small fraction of iPhone users.

“It only affects jailbroken phones using alternative app stores and demonstrates why we’ve been advising against jailbreaking devices or allowing jailbroken devices in a corporate environment for a long time,” Chris Camejo, senior vice president of NTT Com Security, said in a statement.

Apple did not have immediate comment on Monday.

This article originally appeared on Recode.net.

Will you support Vox’s explanatory journalism?

Most news outlets make their money through advertising or subscriptions. But when it comes to what we’re trying to do at Vox, there are a couple reasons that we can't rely only on ads and subscriptions to keep the lights on.

First, advertising dollars go up and down with the economy. We often only know a few months out what our advertising revenue will be, which makes it hard to plan ahead.

Second, we’re not in the subscriptions business. Vox is here to help everyone understand the complex issues shaping the world — not just the people who can afford to pay for a subscription. We believe that’s an important part of building a more equal society. We can’t do that if we have a paywall.

That’s why we also turn to you, our readers, to help us keep Vox free. If you also believe that everyone deserves access to trusted high-quality information, will you make a gift to Vox today?

One-Time Monthly Annual

$5/month

$10/month

$25/month

$50/month

Other

$

Yes, I'll give $5/month

Yes, I'll give $5/month

We accept credit card, Apple Pay, and Google Pay. You can also contribute via