Malicious attackers can flood iPhone users with endless popups using a $170 tool
Wesley HilliardNot Your AirPods
Devices like the Flipper Zero can send out pre-programmed radio signals that can cause an iPhone to open a disruptive interface, effectively being attacked into temporary uselessness.
Apple products like the iPhone have various communication tools like Wi-Fi, Bluetooth, NFC, and Ultra Wideband to make pairing and using accessories easier. These tools are what make systems like AirDrop and fast AirPods pairing possible.
According to a report from TechCrunch, a security researcher asking to be identified as Anthony described an iPhone attack that could be described as a denial-of-service. By using something called a Flipper Zero, false radio signals can be sent out to nearby devices like iPhones to render them effectively useless.
Such an attack is possible for a number of products like Android, but the report focuses on iPhone. The attack is described as a mere annoyance to the user but could be used as a broader attack vector to push scams and other fraudulent pop-ups.
TechCrunch was able to reproduce the attack, but not the frequency of pop-ups that would render a device useless. Anthony also described a situation where an attacker could use an "amplified board" to project signals across "thousands of feet."
Right now, there isn't any mitigation for such an attack beyond shutting off the device or using airplane mode. The stakes are currently low — the embedded video below refers to this as a "prank" — but having the ability to broadcast a malicious signal to interrupt device usage could easily be abused.
The provided example imagines sending malicious pop-ups with scam links to users. One could also imagine a situation where an attacker could interrupt device use in a public area where propaganda is distributed over AirDrop.
Anyone who has been near someone fidgeting with their AirPods case may have encountered something similar previously — incessant pop-ups of "Not Your AirPods" taking over your device display because of your proximity.
In testing, users stopped this attack by shutting off Bluetooth from the Settings app, not Control Center. However, Bluetooth isn't the only signal that could be abused.
Anthony suggests Apple needs to rethink its protocols around wireless signals. Instead of accepting any broadcast signal, Apple should have a verification system for confirming an incoming signal is valid while also shrinking the distance allowed for such communication.
Devices like the Flipper Zero aren't built and marketed as hacking devices or attack tools. However, since the code they run on is open source, skilled coders can rewrite them to perform different functions, even malicious ones.
While this is an interesting proof of concept, it isn't something general users need to defend themselves against actively. As always, users are the first line of defense and should be wary of unexpected pop-ups.
Malcolm Owen
William Gallagher
Charles Martin
Andrew Orr
Amber Neely
6 Comments
Of course Facebook has been force feeding me sponsored posts by the company selling this Flippet One device.
The malware described in the article sounds like the tip of a very big iceberg. Denial of service attacks are annoying, sometimes crippling. But if people click on any of those pop-ups, even by accident, then the potential of identity and data theft start to appear. Then there's the possibility that further iterations of this intrusive malware will be able to pair with a phone without any action by the owner. That's when we start to see that spy movie trope, "just get me close enough and I'll clone it; they'll never know."
I hate hackers. Really just despise them.