- iPhone 5 vs Samsung Galaxy S3 & iPhone 4S Design Comparison (Video)
- Why iOS 6/6.0.1 Untethered Jailbreak Is Taking So Long?
- Apple Airs Santa Claus iPhone 4S Advertisement (Video)
- Unlockers Preserve Baseband Before Updating To iOS 5.1.1 To Keep Unlock (Warning)
- Steve Jobs Life Will Be Celebrated On 19 October 2011
Apple’s iPhone is considered to be one of the most secured smartphone’s in the world and therefore many companies around the world are changing their means of communication from a BlackBerry to an iPhone. Well it seems iPhone isn’t without it’s own security flaws. One such security flaw has been discovered in iPhone’s SMS feature that can “spoof” an iOS text. Read further for more details.
iPhone Text Spoofing
Famous iOS jailbreak hacker, pod2g has discovered a flaw in Apple’s SMS feature that can allow hackers to retrieve your information, simply by asking you! Now this might seem a bit strange but it is true.
Found a heavy SMS flaw in iOS. Doesn’t involve code execution but still severe. Will write an article on my blog quick.
— pod2g (@pod2g) August 14, 2012
Well pod2g explains on his blog that a section in iPhone’s SMS called UDH (User Data Header) has the option to change the reply address of a text. Which means someone can simply text you and it will appear as someone from your contact list (family?) and ask for your personal details such as a credit card number.
The problem arises when you reply to that number, instead of going to the person you know it will be sent to some unknown person. Kind of like phishing scams.
- pirates could send a message that seems to come from the bank of the receiver asking for some private information, or inviting them to go to a dedicated website. [Phishing]
- one could send a spoofed message to your device and use it as a false evidence.
- anything you can imagine that could be utilized to manipulate people, letting them trust somebody or some organization texted them.
Pod2g explain that; although it does not involve code execution, it still does present a major problem in iPhone’s SMS feature, but the worst thing is that this security flaw has been present since the original iPhone and not even in iOS 6 beta 4 has the issue been resolved.
Let’s just hope that Apple fixes this flaw before the final release of iOS 6.