{"id":40860,"date":"2021-05-13T14:25:22","date_gmt":"2021-05-13T14:25:22","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/32283\/Hacker-Manipulates-Apples-Find-My-Network-For-Data-Exfiltration.html"},"modified":"2021-05-13T14:25:22","modified_gmt":"2021-05-13T14:25:22","slug":"hacker-manipulates-apples-find-my-network-for-data-exfiltration","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hacker-manipulates-apples-find-my-network-for-data-exfiltration\/","title":{"rendered":"Hacker Manipulates Apple’s Find My Network For Data Exfiltration"},"content":{"rendered":"

Apple’s Find My network, used to locate iOS and macOS devices \u2013 and more recently AirTags and other<\/a> kit \u2013 also turns out to be a potential espionage tool.<\/p>\n

In short, it’s possible to use passing Apple devices to sneak out portions of information from one place to another, such as a computer on the other side of the world, over the air without any other network connectivity.<\/p>\n

Fabian Br\u00e4unlein, co-founder of Positive Security, devised a way to send a limited amount of arbitrary data to Apple’s iCloud servers from devices without an internet connection using Bluetooth Low Energy (BLE) broadcasts and a microcontroller programmed to function as a modem. That data can then be retrieved from the cloud by a Mac application. In a blog post<\/a> on Wednesday, he dubbed his proof-of-concept service Send My<\/a>.<\/p>\n