Apple denies iCloud to blame for ‘Find My iPhone’ ransom attack

28 May 2014

Apple has dismissed suggestions iCloud passwords have been compromised and used by hackers to lock users out of their Mac and iOS devices and demand a ransom. Still, the company has urged users to change their password.

Various media reported yesterday that a group of hackers going by the name ‘Oleg Pliss’ were targeting Macs, iPhones and iPads via the Find My iPhone feature, which allows owners to remotely find or lock their mobile devices.

Users discovering their devices were locked were being asked to submit between AUS$50 and AUS$100 via PayPal to regain access.

One theory mooted was that hackers were able to gain access to old usernames and passwords for services such as iCloud to target devices.

However, Apple said this is not the case. In a statement, the company said, “Apple takes security very seriously and iCloud was not compromised during this incident.

“Impacted users should change their Apple ID password as soon as possible and avoid using the same username and password for multiple services.

“Any users who need additional help can contact AppleCare or visit their local Apple Retail Store,” Apple said.

John Kennedy is a journalist who served as editor of Silicon Republic for 17 years