{"id":36863,"date":"2020-08-26T19:21:34","date_gmt":"2020-08-26T19:21:34","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/"},"modified":"2020-08-26T19:21:34","modified_gmt":"2020-08-26T19:21:34","slug":"heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/","title":{"rendered":"Here’s a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari"},"content":{"rendered":"
<\/div>\n

Pawel Wylecial, a security consultant with Redteam.pl, has published a proof-of-concept exploit for stealing files from iOS and macOS devices via web application code that utilizes the Web Share API.<\/p>\n

The security flaw, which isn’t too scary as it requires some user interaction, has not yet been repaired, though a patch is being worked on. It’s interesting enough to share here so that developers can avoid similar vulnerabilities in their software.<\/p>\n

The exploit<\/a> involves getting someone to open in Safari a web page with a button that triggers the WebShareAPI in a way that launches native Mail or Gmail apps. In doing so, the message can attach a file from the local system, such as the browser history and other sensitive files, while hiding the attachment from view.<\/p>\n

It probably works with other iOS browsers too because Apple forces all iOS browsers to use its WKWebView<\/a> class, which implements the WebShare API, for rendering web content.<\/p>\n

Wylecial claims to have revealed the flaw in April to Apple, which after several unresponsive months recently asked for disclosure to be delayed until Spring 2021, when the company thought it might get around to issuing a security update.<\/p>\n

Finding it unreasonable to be asked to wait for a year, Wylecial went ahead and published details about the flaw.<\/p>\n

The Web Share API, he explains, lets browser users share links in the browser with third-party native applications like mail and messaging apps. The API allows a file:<\/code> path to be supplied as if it were a URL to be shared. Native apps can then receive that file path via the navigator.share<\/code> function and will supply it to the shared message.<\/p>\n

In a GitHub issue<\/a> to the Web Share API repo, Matt Giuca, a Google Chrome developer, says, “The vulnerability is due to apparent misbehavior of the native app, which is not subject to same-origin policy and is therefore able to fetch any URL it wants, including local files. Native apps should not trust incoming intents (which could be coming from any app), but from the browser side, we have no control over the behavior of native apps.”<\/p>\n

Giuca adds that the issue goes beyond file URLs. It has implications for any sensitive URL on the user’s private network, like router configuration files, he suggests, adding that it also affects public URLs that might reveal private information if accessed with local cookie files.<\/p>\n

Wylecial’s video demo<\/a> shows that malicious code can attach a sensitive local file, like a user’s \/etc\/passwd<\/code> file or Safari browsing history, to an outgoing message.<\/p>\n

The bug isn’t too serious, Wylecial says, because user interaction is required, though he allows that it’s easy enough to make the shared file invisible to the user. That would make successful data exfiltration more likely.<\/p>\n

\n

Wow, this Web Share API bug \u2935\ufe0f is concerning.\n<\/p>\n

const pwn = () => {
\n
navigator.share({
\n
text: ‘Check out this cute kitten!’,
\n
url: ‘file:\/\/\/etc\/passwd’,
\n
});
\n
};\n<\/p>\n

Turns out Safari actually shares the _contents_ of \/etc\/passwords, and allows for stealing the history, too. https:\/\/t.co\/O0J7tqmYyq<\/a><\/p>\n

\u2014 Thomas Steiner (@tomayac) August 25, 2020<\/a><\/p><\/blockquote>\n

About a day ago, Apple’s WebKit team developed a fix<\/a> for the issue. It hasn’t yet been released.<\/p>\n

The Register<\/i> asked Apple for comment. True to expectation, we’ve not heard back. \u00ae<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Speaking purely hypothetically, of course Pawel Wylecial, a security consultant with Redteam.pl, has published a proof-of-concept exploit for stealing files from iOS and macOS devices via web application code that utilizes the Web Share API.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":36864,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-36863","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nHere's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Here's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-08-26T19:21:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"648\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Here’s a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari\",\"datePublished\":\"2020-08-26T19:21:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/\"},\"wordCount\":572,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/\",\"name\":\"Here's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg\",\"datePublished\":\"2020-08-26T19:21:34+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg\",\"width\":648,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Here’s a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Here's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/","og_locale":"en_US","og_type":"article","og_title":"Here's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-08-26T19:21:34+00:00","og_image":[{"width":648,"height":448,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Here’s a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari","datePublished":"2020-08-26T19:21:34+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/"},"wordCount":572,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/","url":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/","name":"Here's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg","datePublished":"2020-08-26T19:21:34+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari.jpg","width":648,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/heres-a-neat-exploit-to-trick-someone-into-inadvertently-emailing-their-files-to-you-from-their-mac-iphone-via-safari\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Here’s a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36863","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=36863"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36863\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/36864"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=36863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=36863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=36863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}