새로운 악성 라이트닝 케이블은 멀리 떨어진 곳에서 사용자 데이터를 훔칠 수 있습니다.

newsroom 9/6 '21 posted 뉴스 IT

새로운 악성 라이트닝 케이블은 멀리 떨어진 곳에서 사용자 데이터를 훔칠 수 있습니다. | USB-C-Lightning 케이블 내부에 숨겨진 무선 키 로거

• 이후 MG는 사이버 보안 공급업체 Hak5와 협력하여 연구자 및 침투 테스트용 케이블을 양산할 수 있었습니다.

• 기타 기능으로는 키보드 매핑을 변경할 수 있는 기능과 USB 디바이스의 ID를 위조할 수 있는 기능이 있습니다.

• 삽입물 자체는 USB-C 커넥터의 플라스틱 쉘 길이의 절반 정도를 차지하므로 케이블이 정상적으로 작동할 수 있습니다.

• "MG"라는 보안 연구원이 일련의 침투 테스트 도구의 일부로 만든 이 케이블은 이제 사이버 보안 공급업체 Hak5가 판매할 양산에 들어갔습니다.

• 해커가 연결할 수 있는 Wi-Fi 핫스팟을 만들고 간단한 웹 앱을 사용하여 키 입력을 기록하는 방식으로 작동합니다.

• 표준 라이트닝 투 USB 케이블과 똑같이 생긴 OMG 케이블은 보안 연구원 MG에 의해 2019년에 처음 시연되었습니다.

• "C형 케이블은 공간이 부족하기 때문에 이러한 유형의 임플란트로부터 안전하다고 말하는 사람들이 있었습니다.

• 따라서, 분명히, 저는 그것이 틀렸다는 것을 증명해야만 했습니다."라고 보안 연구원인 MG는 바이스에게 말했습니다.

• Hak5에서 약 120달러에 제공되는 OMG 케이블은 공격자가 자체 장치에서 연결할 수 있는 Wi-Fi 핫스팟을 만드는 방식으로 작동합니다.

Security Researcher Develops Lightning Cable With Hidden Chip to Steal Passwords [www.macrumors.com]

New malicious Lightning cable can steal user data from a mile away [appleinsider.com]

This Seemingly Normal Lightning Cable Will Leak Everything You Type [www.vice.com]

This USB-C Lightning cable should terrify you [www.pcworld.com]

Wireless key-logger hidden inside USB-C to Lightning cable [9to5mac.com]

newest replies popular replies

Open Wiki - Feel free to edit it. -

9/6 '21 answered

Speaking of “things in one of my books”, there’s a scene in THE TEMPUS PROJECT where someone falls foul of a doctored power cable like this. No longer speculative, then. https://t.co/CWO8YW57ho
— Antony Johnston (@AntonyJohnston) September 2, 2021

Pretty sneaky, this USB cable has a keylogger and mini wifi network built in. Records every keystroke in realtime for wired devices like a keyboard.https://t.co/tyhUVIr0Yg
— Blompf Junior 5% ??Fall of the Weimart☀️Republic (@BlompfJunior) September 2, 2021

A new version of the OMG Cable is a USB-C to Lightning Cable that hackers can use to steal your passwords or other data. https://t.co/e4DLuYVGyA
— Motherboard (@motherboard) September 2, 2021

New: tried out the newer OMG Cables, one being a Lightning to USB-C cable that looks identical to the real Apple one. But it silently sends everything you're typing on your keyboard to an attacker's device potentially a mile away https://t.co/vJU4MjiQiu pic.twitter.com/FZjEEFVZ2V
— Joseph Cox (@josephfcox) September 2, 2021

A side by side of a real Apple cable and a secretly malicious one that can steal your keystrokes etc https://t.co/vJU4MjAra2 pic.twitter.com/58F7m2wGLy
— Joseph Cox (@josephfcox) September 2, 2021

Here is the attacker's interface. Just connect to the wifi hotspot hidden inside the malicious cable, start the keylogging, or push another payload if you want https://t.co/vJU4MjiQiu pic.twitter.com/hyDM8WQW98
— Joseph Cox (@josephfcox) September 2, 2021

It looks and works like a Lightning cable, but it's actually a malicious cable that can record everything I type, including passwords, and wirelessly send that data to a hacker who could be more than a mile away. https://t.co/HZkVgw9NSD
— Motherboard (@motherboard) September 2, 2021

This Lightning Cable Will Leak Everything You Type https://t.co/I0ijEUFE8t #news
— packet storm (@packet_storm) September 2, 2021

Some detail on the interior of the malicious Apple cables https://t.co/vJU4MjiQiu pic.twitter.com/zVkYHTWnWG
— Joseph Cox (@josephfcox) September 2, 2021

permanent link

Featured

Important Notice: Discontinuation of Our Wiki Service

Dear Valued Users,

We hope this message finds you well. We are writing to inform you of an important upcoming change to our services. After careful consideration and analysis, we have made the difficult decision to discontinue our wiki site, effective one month from 2024/04/30.

This was not an easy decision to make, as we understand the importance of the resources and community that have been built around our wiki. However, due to evolving market conditions and strategic realignments, we must redirect our resources and efforts towards other ventures that will allow us to serve you better in the future.

What This Means for You:

Access to Content: You will continue to have full access to all content on the wiki until the discontinuation date. We encourage you to save or migrate any content you wish to retain.
Final Date of Service: The wiki will become inaccessible starting 1st June 2024, after which all content will be permanently removed.

We are immensely grateful for the support and contributions of our user community throughout the years. The wiki is being retired, but our team will be back soon with new services and apps.

Thank you for being a part of our journey.

Warm regards,

editoy Inc.

Related

Featured