Over 200000 Jailbroken Apple IDs Were Exposed!

A new malware named KeyRaider, has made its way to jailbroken iOS devices and capture your Apple ID including password, as one of the violations for Apple.

This malicious software is primarily distributed via Cydia repositories in China, France, Russia, Japan, UK and more than 17 countries. KeyRaider steals over 200000 Apple iCloud accounts and hooks system processes through MobileSubstrate. It steals Apple push notification service certificates and private keys, steals and shares App Store purchasing information including usernames, passwords and device GUID by intercepting iTunes traffic on the device, and disables local and remote unlocking functionalities on Apple devices like iPhone and iPad, unless paying ransom enough.

KeyRaider's appearance underscores that jailbreaking, despite being occasionally useful, represents a significant security risk for users. While iOS is impressively secure in its default configuration, jailbreaking necessarily removes some protections and opens devices up to unwanted data exfiltration.

Therefore, for some users, whose iPhone has been jailbroken, reach few kindly advices from this incident:

1. Cautiously use some jailbroken tool, although it comes from some authoritative websites.
2. Change preference or reset your Apple ID password, follow the hint to get your Apple ID back again. Or if you can’t remember your Apple ID, just provide some basic information including password and phone number to verify and find your Apple account.
3. Such being the matter, you don’t need to regret about that. Some professional software like FonePaw iPhone Data Recovery, which focus on recovering data from iOS devices, and then get restoring jailbroken iPhone with ease!