How hackers can destroy your iPhone with just an Android device, And you can't use that IOS device.
In today's blog post, we are going to see how hackers can do this by using an Android app
Spoof iOS devices with Bluetooth pairing messages using Android ( You can also call it a local DoS attack )
It is possible to spoof pairing notifications even using any non-rooted Android by using an Android app whose name is
nRF Connect for Mobile.
We are going to discuss how hackers can spoof iOS devices with Bluetooth pairing messages using Android. This means you can say that you can do a local DDoS attack on an iOS device from an Android. This means that any Android user running this app can send notification pop-up messages to iOS devices in the vicinity
Now just we want data that helps us imprison, Data to input are available in the AppleJuice project in the
app.py file
The present local Denial of Service (DoS) attack can now be initiated by employing the Flipper Zero device, which operates on custom Unleashed dev build firmware (flipper-z-f7-update-811), obtainable for download from their Telegram group. The application can be located in the App section under Bluetooth, specifically Apple BLE Spam. Curiously, these pairing messages can be received even when Airplane mode is activated, thereby disabling wireless functionalities. This capability may be intended to enable the playback of locally stored music through paired Bluetooth headphones during a flight. Such an achievement would not have been feasible without the invaluable contribution of @tech research. A video demonstration of this attack can be viewed below.
Perhaps you are familiar with the Defcon unwanted persistent pop-up pairing messages that were received by numerous attendees this year, prompting them to pair their iPhones with nearby Apple TV or other gadgets via Bluetooth. In this blog post, we will demonstrate the process of sending these pop-ups to nearby iPhone devices from an Android smartphone. This is made possible through the utilization of the AppleJuice tool, originally designed for Linux devices, which has been successfully tested on both laptops and Raspberry Pi 3B+. Consequently, it can also be installed and utilized on Android devices. The act of spoofing can even be accomplished using the device's built-in Bluetooth chip. If you are interested in learning how to utilize Bluetooth tools on an Android device running NetHunter, please stay tuned for our upcoming blog post, which will delve into the topic of Bluetooth Arsenal.
About practical: Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against the real hackers "
Disclaimer :
Use this only for educational purposes... I am not responsible for your actions...Love you, guys. Stay safe !!! Stay legal !!!
How it works
Bluetooth Low Energy (BLE) pairing on an Apple device uses Advertisement (ADV) packets and follows a specific process to establish a secure connection between two devices. Here’s an overview of how this process works:
Advertising: Gadget device such as the AirTags, AirPods, Apple TV, etc. advertises themselves by broadcasting ADV packets. These packets contain essential information about them like name, services, and an ID.
Scanning: The iPhone scans for nearby BLE devices by listening for ADV packets. When it detects an ADV packet from such devices, it collects the information and displays a notification.
Establishing a Connection: Once the iPhone decides to connect to the gadget (e.g., the user selects a device to pair with), it sends a connection request. This establishes a secure and encrypted connection between the two devices.
That was the standard process of pairing devices. However, the problem is that any Apple device in the surrounding area receives such a pairing notification. Because of that, we can emulate our Android device to send these pairing messages and make iOS devices in the vicinity believe we are for example AirPods. As a result, this could be considered a local Denial of Service (DoS) attack.
You can also perform with Termux
On top of that, I have created a quick Python script that will circle every 5 seconds through all available devices to make nearby iOS devices. You can see the demonstration video at the beginning of the blog. The script is available on GitHub.
Prevention:
Just turn it off Bluetooth when you not using it
Hindi Explanation:
Coming soon with a youtube video!
0 Comments