CIA hacked Apple devices in new Wikileaks revelation

NEW YORK — New documents from WikiLeaks point to an apparent CIA program to hack Apple’s iPhones and Mac computers using techniques that users couldn’t disable by resetting their devices.

Security experts say the exploits are plausible, but suggest they pose little threat to typical users. They say that many of the tricks are older — the iPhone hack involves the 3G model from 2008, for instance. The techniques also typically require physical access to devices, something the CIA would use only for targeted individuals, not a broader population.

“The most notable part of this latest WikiLeaks release is that it shows the CIA doing exactly what we pay them to — exploit specific targets with limited attacks to support our national interests,” said Rich Mogull, CEO of the security research firm Securosis.

Apple didn’t respond to a request for comment. The CIA has not commented on the authenticity of this and earlier WikiLeaks revelations, but has previously said it complies with a legal prohibition against electronic surveillance “targeting individuals here at home, including our fellow Americans.” The agency declined further comment Thursday.

DOCUMENT DUMP

The leaks Thursday come about two weeks after WikiLeaks published thousands of alleged CIA documents describing hacking tools it said the government employed to break into computers, mobile phones and even smart TVs from companies like Apple, Google, Microsoft and Samsung.

The latest disclosures are much more focused and consist of just 12 documents, all involving Apple products. The documents describe techniques for rewriting devices’ firmware in ways that would maintain a hacker’s access even if a user resets a phone or computer to factory settings. Doing so wipes out all apps and the operating system and installs a clean version; it is an extreme measure sometimes used to deal with technical problems, but is also the sort of step that someone suspicious of surveillance might take when getting a brand new phone.

A December 2008 document describes “NightSkies,” a tool apparently designed to target the iPhone 3G; the document claims it can retrieve files such as contact lists and call logs and execute other commands. WikiLeaks suggested in a press release that the “CIA has been infecting the iPhone supply chain of its targets since at least 2008.”

However, the document describes only how to install the malware on a “factory fresh” version of the 3G — specifically, the iPhone 3G running the 2.1 version of Apple’s operating system, both of which are now nine years old.

CAVEATS GALORE

But infecting all phones somewhere in the manufacturing process would be extremely difficult, said Mogull, especially given multiple layers of inspections conducted by Apple and its contractors. At most, he said, the CIA might have shipped a rogue phone individually to a target.

And while it’s possible that the CIA developed similar techniques for later iPhone models, Mogull said iPhones from the past few years have much greater security, including digital security certificates that cannot be overwritten. A flag would be raised during the setup process if certificates do not match.

Johannes Ullrich, director of the Internet Storm Center at the SANS Institute, said NightSkies might not even be a current project given that the document was last updated in 2008, while the leaks appear to have come in 2016.

Other documents released describe similar exploits for Mac computers. One hides in the firmware of Apple’s Thunderbolt-to-Ethernet adapter and requires someone to plug in that adapter to install the malware. Another targets a specific Mac model, the MacBook Air with the Leopard version of the Mac OS system — current at the time, but now seven generations old.

Ullrich said the Mac exploits all appear old. He added that some of the Thunderbolt issues have been fixed to make the hack more difficult to pull off.

ad-high_impact_4
News
VA Southern Nevada Healthcare System hosts Veterans Day Car Show and BBQ
The 4th Annual Veterans Day Car Show and BBQ is held in celebration of Veterans Day at the VA Southern Nevada Healthcare System Medical Center in North Las Vegas, Saturday, Nov. 10, 2018. (Caroline Brehman/Las Vegas Review-Journal)
Wildfires in Southern California
Wildfires hit Ventura County, Calif., on Nov. 9, 2018. (Richard Brian/Las Vegas Review-Journal)
Dedication of Nevada's Battle Born memorial
The state of Nevada on Friday dedicated its Battle Born memorial honoring 895 state residents who have died in America’s wars.
Las Vegas police and Sunrise Children's Hospital hope to prevent infant deaths
The Metropolitan Police Department and Sunrise Children's Hospital held a press conference to get the message out on preventable infant deaths attributed to "co-sleeping" and other unsafe sleeping habits. (K.M. Cannon/Las Vegas Review-Journal)
No serious injuries after car hits tree in south Las Vegas
One person reported minor injuries but wasn’t hospitalized after a Wednesday morning crash in the south valley.
Nellis Air Force Base keeps airmen fed
Nellis Air Force Bass airmen have delicious and healthy food items, and a variety of dining facilities to choose from. (K.M. Cannon/Las Vegas Review-Journal)
Suspicious package found at central Las Vegas post office
Las Vegas police determined that a suspicious package found Monday morning at a central valley post office was not a threat.
Suspicious package found at central Las Vegas post office
Police evacuated the area around the Garside Station post office early Monday morning near Oakey and Decatur boulevards.
With husband's passing, family in limbo for workers' comp claim
Meredith Tracy's husand, Russell Tracy, died more than a year ago on his first day working for a new company when he fell 22 feet into a manhole that was not properly safeguarded. His employer was fined $82,000 in penalties for unsafe practices, but the company has denied her workers' compensation claim, leaving her with no compensation since the death. Rachel Aston Las Vegas Review-Journal @rookie__rae
With husband's passing, family in limbo for workers' comp claim
Meredith Tracy's husand, Russell Tracy, died more than a year ago on his first day working for a new company when he fell 22 feet into a manhole that was not properly safeguarded. His employer was fined $82,000 in penalties for unsafe practices, but the company has denied her workers' compensation claim, leaving her with no compensation since the death. Rachel Aston Las Vegas Review-Journal @rookie__rae
Las Vegas family shares flu warning
Carlo and Brenda Occhipinti lost their son, Carlo Jr., or “Junior,” to the flu last year.
Author Randall Cannon shares an anecdote about Stadust Raceway
Author Randall Cannon shares an anecdote about Dan Blocker, who played Hoss Cartwright on the TV show "Bonanza," and the actor's passion for auto racing at Stardust International Raceway in Las Vegas during the 1960s. (Ron Kantowski/Las Vegas Review-Journal.)
Project Neon 85 percent complete
On Wednesday morning Oct. 31, Interstate 15 northbound lane restrictions were removed opening up Exit 41 to Charleston Blvd. On Thursday Nov. 1, Interstate 15 southbound lane restrictions were removed. The new southbound off-ramp to Sahara Ave. and Highland Dr. also opened Thursday, November 1. With Project Neon 85% finished the flow of traffic on Interstate 15 has substantially diminished. (Michael Quine/Las Vegas Review-Journal)
Girl killed after jumping from bridge onto 215 Beltway in Henderson
Eastbound lanes of the 215 Beltway are shut down by the Nevada Highway Patrol after a female juvenile jumped from the 215 overpass at Stephanie and was struck by a FedEx tractor trailer. Michael Quine/Las Vegas Review-Journal @Vegas88s
Kristallnacht story
An interview with 94-year-old Holocaust survivor Alexander Kuechel who survived seven concentration camps and didn’t leave Germany until after World War II was over. (Mia Sims/Las Vegas Review-Journal)
1 dead in central Las Vegas crash
An early Wednesday morning crash left at least one person dead and another injured. The crash was reported just around 3 a.m. at the intersection of Flamingo Road and Swenson Street. At least two vehicles were involved in the crash, one of which caught fire. Debris was scattered across the intersection as police combed the area as they investigated the scene. Flamingo is blocked in both directions between Swenson and Cambridge Street. Northbound Swenson is blocked at the intersection.
Richard Knoeppel named the 2018 Nevada Teacher of the Year
Richard Knoeppel, an architecture design instructor at the Advanced technologies Academy, named the 2018 Nevada Teacher of the Year on Monday, Oct. 29, 2018. (Bizuayehu Tesfaye/Las Vegas Review-Journal) @bizutesfaye
Mojave Poppy Bees
(Zach Portman/University of Minnesota Department of Entomology) Male Mojave poppy bees exhibit territorial fighting behavior. The Center for Biological Diversity wants the bee, found only in Clark County, to be added to the endangered species list.
Clark County Schools announce random searches
Clark County School District middle and high school students will be subject to random searches for weapons under a new initiative to combat the wave of guns found on campus. (Amelia Pak-Harvey/Las Vegas Review-Journal)
Ron Jeremy and Heidi Fleiss React to Dennis Hof's Death
Ron Jeremy and Heidi Fleiss speak about their friend and prominent brothel owner Dennis Hof's death at Dennis Hof's Love Ranch. (Benjamin Hager/Las Vegas Review-Journal)
Nevada brothel owner Dennis Hof has died
Nevada brothel owner and Republican candidate for Nevada State Assembly District 36, Dennis Hof has died. He was 72. Nye County Sherriff's office confirmed. Hof owned Love Ranch brothel, located in Crystal, Nevada.
Las Vegas police investigate suspicious package at shopping center
Las Vegas police evacuated a southeast valley shopping center at Flamingo and Sandhill roads early Tuesday morning while they investigated reports of a suspicious package. (Max Michor/Las Vegas Review-Journal)
The Las Vegas Metro hosts the K-9 Trials
The Las Vegas Metro K-9 Trials returns to the Orleans Arena to benefit the Friends For Las Vegas Police K-9 group.
Kingman residents love their little town
Residents of Kingman, Ariz. talk about how they ended up living in the Route 66 town, and what they love about their quiet community. (K.M. Cannon/Las Vegas Review-Journal)
Service at Southern Nevada Veterans Memorial Cemetery
Twelve unclaimed veterans are honored at Southern Nevada Veterans Memorial Cemetery in Boulder City in Oct. 9, 2018. (Briana Erickson/Las Vegas Review-Journal)
Las Vegas house prices reach highest level in 11 years
Las Vegas house prices are rising But so is the amount of available homes on the market Still, properties priced below $300,000 are selling fast And September was the first time since June 2007 that the median house price reached the $300,000 mark Las Vegas home prices have been rising at one of the fastest rates in the country over the past year Recent data show the market is now less affordable than the national average
National Night Out
About 100 Summerlin residents gathered at Park Centre Dr. in Summerlin on Tuesday for National Night Out. Lt. Joshua Bitsko with Las Vegas Metro, played with 3-year-old David who was dressed as a police officer. Face painting, fire truck tours and more kept kids busy as parents roamed behind them. (Mia Sims/Las Vegas Review-Journal)
Rural homeless issue comes to a head in Pahrump
On Sept. 12, Pahrump sheriff deputies told residents of a homeless encampment on private property that they had 15 minutes to vacate and grab their belongings. That decision might face some legal consequences. (Rachel Aston/Las Vegas Review-Journal)
Remembrance blood drive on October 1
A blood drive was held at the Las Vegas Convention Center on the one year anniversary of the Oct. 1 shooting. (Mat Luschek/Las Vegas Review-Journal)
Remembrance Lights memorial unveiled at St. Rose hospital
A dedication ceremony was held at St. Rose to unveil a memorial and to read the names of those who died on October 1, a year ago. (Mat Luschek/Las Vegas Review-Journal)
TOP NEWS
News Headlines
Add Event
Home Front Page Footer Listing
Circular
You May Like

You May Like