CZ warns crypto community of new exploit targeting macOS and iPhone users

by

As a seasoned crypto investor with a penchant for Apple devices, I can’t help but feel a sense of unease when reading about these persistent security vulnerabilities. My MacBook Pro has been my trusted companion through countless trading sessions, but recent events have made me question its invincibility.

Previously heading Binance, Changpeng ‘CZ’ Zhao, has alerted the cryptocurrency fraternity regarding a fresh hacking threat specifically aimed at Mac users with Intel processors. This potential vulnerability might lead to the exposure of a user’s virtual assets.

On November 19th, Zhao brought attention to the ongoing zero-day exploit issue, advising users of Intel-based Macs to update their systems immediately to avoid falling prey to these exploits. It’s important to note that this vulnerability also affects iPhones and iPads, and it has been actively used to target Mac systems. As a result, Apple has released emergency patches to address the issue.

If your MacBook has an Intel processor, make sure to update it immediately for safety reasons, as warned by Zhao in the crypto community due to possible threats to confidential information.

Zero-day vulnerabilities refer to security flaws that hackers can utilize for attack before a fix (patch) has been released. Since developers have no time (or “zero days”) to correct the problem before it’s exploited, users remain exposed until they install the necessary updates.

As an analyst, I’ve uncovered some concerning findings from Apple’s postmortem analysis. The issues at hand are identified as CVE-2024-44308 and CVE-2024-44309, which specifically target the JavaScriptCore and WebKit components within macOS Sequoia. Malicious actors can exploit these vulnerabilities to carry out “cross-site scripting attacks,” allowing them to surreptitiously run harmful code on unsuspecting users’ systems.

In simpler terms, Cross-site scripting (XSS) attacks are a type of security flaw where hackers insert harmful code into trusted websites or applications. This code gets executed in the visitor’s web browser, potentially allowing the hacker to seize control of user sessions, guide users towards harmful sites, and pilfer confidential data.

Hackers specializing in cryptocurrency have consistently taken advantage of similar weaknesses found in both Mac and Windows operating systems over time. This has allowed them to pilfer wallet details, carry out fraudulent phishing activities, and even introduce malicious software that drains digital assets by stealing private keys.

The large technology company identified one security concern as a problem with how cookies were handled, which they’ve now fixed by enhancing their management approach. Meanwhile, they tackled the other issue by strengthening their check processes, according to the report.

Initially, the weaknesses were identified by experts from Google’s Threat Analysis Group, a team renowned for examining cyber threats backed by governments. Consequently, there has been some conjecture about whether state-funded entities might be implicated in these incidents.

Apple has not revealed specifics about the severity of the impact, only mentioning that the discovered vulnerabilities have already been used for active exploitation.

Apple users at risk

Even though Apple is known for its robust security, users of their products have faced risks on multiple instances this year. For example, on November 12, North Korean cybercriminals aimed their attacks at Mac users, employing crypto-related malware that could bypass Apple’s protective measures on outdated systems.

Last month, Trust Wallet alerted users about a potential security vulnerability in Apple’s iMessage system. This flaw, referred to as a zero-day exploit, enables hackers to gain access to iPhones without requiring any action from the device’s owner.

About a month ago, a vulnerability was found in Apple’s M-series processors by researchers. This weakness could potentially allow hackers to access cryptographic keys stored within the processor’s cache memory, making sensitive information vulnerable to breaches.

Additionally, it’s worth noting that attackers have successfully breached the App Store on multiple occasions, even with Apple’s rigorous regulations in place. They’ve used this access to push malicious applications that pretend to be well-known cryptocurrency exchanges, wallets, and other deceptive platforms designed to misappropriate a user’s digital assets.

Read More

2024-11-21 10:46