General 220 Thousand of iCloud Accounts Has Been Leaked Due to Some Back Door Tweaks!

Mr.Nobody · August 25, 2015

So this was announced by a China security website WooYun (it means Black cloud in Chinese based on sound) earlier on their Weibo, and it is basically telling that there are some shady tweaks that have back-doors is stealing Jailbreak user's iCloud account and password to a remote server, which so far there are roughly 220 thousand accounts has been leaked. They haven't announce that who stole it and what for, but as far as we know that, if they hack into our iCloud accounts, they can have access to our mails, photos or even private stuff.

What can we do now?

I think the best we can do is to delete some shady sources or uninstall some shady tweaks (how can we know? ) or even we change our account password or enable the two step verification.

WooYun's announcement: http://www.wooyun.org/bugs/wooyun-2015-0136806

Weibo post:

Ky1e · August 25, 2015

Who would be dumb enough to install shady tweaks from personal repos anyway?

Mr.Nobody · August 25, 2015

@

Idk since we don't know what's "that" shady tweak.

Rook · August 25, 2015

Jailbreaking

Svensken · August 25, 2015

Who would be dumb enough to install shady tweaks from personal repos anyway?

me.

Proton · August 25, 2015

I personally could care less if anyone hacked into my iCloud email, photos, or anything really. I have nothing to hide

I'm more worried for people who have jobs, celebrities and such. Hopefully nothing bad happens to anyone.

Srau · August 25, 2015

Nice copy paste from /r/jailbreak

At least change up the paragraph

KingRalph · August 25, 2015

I personally could care less if anyone hacked into my iCloud email, photos, or anything really. I have nothing to hide

I'm more worried for people who have jobs, celebrities and such. Hopefully nothing bad happens to anyone.

iCloud is connected to find my ipad/iphone

Anyone that has your iCloud password may be able to track your device.

I suggest that everyone change their iCloud password - better safe than sorry