Search results for: “user”

The British government has quietly asked Apple to give it full access to every user’s encrypted data stored in the cloud, according to The Washington Post. This secret directive reportedly came last month, compelling Apple to design a backdoor allowing UK security agencies to access encrypted user data around the world. This is a demand that has never been made in any other democratic nation.

The order was delivered via a “technical capability notice” under the UK’s 2016 Investigatory Powers Act (IPA), which critics call the “Snooper’s Charter.” This law allows law enforcement to force companies to assist in gathering evidence.

Apple has not commented on this issue. The law makes it illegal for Apple to even acknowledge such a demand from the government. Similarly, the Home Office declined to confirm or deny the existence of such notices, stating it does not discuss operational details.

A consultant who advises the US on encryption issues said Apple would not be able to inform users that their encryption is no longer secure. A former White House security advisor verified the UK’s order.

Apple Might Stop UK iCloud Services Over Privacy Concerns

There’s talk that Apple might pull its encrypted storage service from the UK rather than weaken the privacy promises it made to its users. However, this wouldn’t stop the UK from accessing the service in other countries. Apple has hinted before that it might withdraw services like FaceTime and iMessage from the UK if privacy is compromised. Apple’s Advanced Data Protection, introduced in 2022, allows users to encrypt additional data categories like Photos and Notes, keeping them private even from Apple.

Google, on the other hand, has made encryption standard for Android backups since 2018. When asked if any government had asked for a backdoor, Google responded that they can’t access encrypted backup data, even with a legal order.

How to Secure Your iCloud Data

The IPA was revised in 2023 to let the Home Office potentially ban certain encrypted services. Apple criticized these changes as excessive government control, suggesting they could prevent new security features from being offered globally.

Apple CEO Tim Cook has always argued against providing backdoors, stating it would invite criminals to access user data. Cybersecurity experts agree, warning that any backdoor could be exploited. Apple’s resistance was notable in 2016 when they fought and won against a US order to unlock an iPhone.

With increasing cyber threats from state actors, like those from China, US officials are now more focused on cybersecurity than ever, promoting encryption to protect communications. Privacy advocates, like Big Brother Watch, argue that such measures won’t make the UK safer and will instead undermine basic rights and freedoms.

Source

Yesterday, cybersecurity experts at Kaspersky revealed details about a new type of malware called “SparkCat” that was found in a handful of iOS apps. Following this revelation, Apple swiftly removed these apps from its App Store.

Among the apps affected were ComeCome, WeTink, and AnyGPT. In total, 11 apps were taken down, but Apple’s investigation led to the discovery of an additional 89 apps with similar malicious code, which had already been rejected or removed due to Apple’s strict anti-fraud rules. When Apple removes an app for such reasons, it also shuts down the developer’s account.

According to Kaspersky, the malware included a harmful tool that could read text from images and screenshots on iPhones, particularly targeting recovery phrases for cryptocurrency wallets. The aim was to steal valuable information like bitcoin codes, but it could also grab other sensitive phrases like passwords.

Apple’s default settings prevent apps from accessing your photos without your permission. However, if users granted these apps access to their photo library, the malware could scan for and transmit any matching key phrases to a server controlled by the attackers. The malware seemed to focus on iOS users in Europe and Asia.

Since the release of iOS 14, Apple has improved how apps can access your photos, allowing users to permit only specific images rather than the whole album. It’s wise to be cautious with app permissions and avoid granting access to all your photos to apps that seem suspicious.

Apple also offers an “App Privacy Report” feature, which you can find in the Privacy section of your iPhone’s Settings. This report shows when and how often apps access your sensitive data like your location, photos, camera, and microphone.

It’s always good to keep an eye on these privacy settings to protect your personal information.

Source

For the first time, a type of harmful software that can read what’s on your screen has been spotted in apps from the Apple App Store, according to a report by Kaspersky.

This new malware, known as “SparkCat,” can look at screenshots on your iPhone to find private information. The main aim of these apps is to find the secret codes for cryptocurrency wallets, making it possible for thieves to steal your bitcoins and other digital money.

The apps contain a sneaky part that uses a special tool from Google’s ML Kit to read text in pictures. If it sees an image of a crypto wallet, that image gets sent to a server where the attacker can grab it.

SparkCat has been around since about March 2024. While similar malware was previously found on Android and computers, it’s now made its way to iPhones. Kaspersky found apps like ComeCome, WeTink, and AnyGPT in the App Store with this spying software. However, it’s not clear if these developers put the malware there on purpose or if it was added by someone else attacking the app’s supply chain.

Once you download these apps, they’ll ask to see your photos. If you say yes, they’ll use their reading tool to scan through your pictures for important information. These apps are still in the App Store and seem to be focusing on people in Europe and Asia.

While the primary target is crypto information, Kaspersky warns that this malware could also steal other screenshot data, like passwords. This issue isn’t just for iPhone users; similar threats have been seen on Android too, but iPhone users usually think their devices are safer from such threats.

Apple usually checks all apps before they go into the App Store, so finding malware like this shows a slip in their review process. In this case, the harmful apps don’t show they’re bad, and the permissions they ask for look like they’re needed for the app to work.

Kaspersky advises against keeping screenshots of important details like crypto wallet codes in your photo collection to protect yourself from such attacks. For more details on which apps are affected and more about this malware, you can visit Kaspersky’s website.

Source