A well-known hacker has released a new version of his iPhone cable that can be used to steal data from various devices. Mike Grover’s (“MG”) so-called OMG cable looks like a standard white USB-C-Lightning cable sold by Apple, of which millions are in circulation. But the hacker cable contains electronics that allow you to record keystrokes, which can be used above all to transmit “fished” content via a built-in WLAN hotspot.
The first version of OMG Cable (“Offensive MG”) is a USB -It was a Lightning cable with more space for extra parts. Now, however, Grover says he has managed to use the technology on the USB-C connector as well. The system is designed to be even “self-destructive” so that the attacker is not detected or the cable can be used on devices other than the one they wanted to break.
The hacker cable defaults to allows attacks against Mac, PC, iPhone and iPad. Grover said there were those who said USB-C cables were safe against such “implants” because there wasn’t enough space for electronics. “Of course, I had to show them that this wasn’t true,” he boasted of his performance. There is usually no query on the machines for this. An attacker could then enter data into the target computer and, for example, launch a keylog or display phishing pages. The range is optimized, during the tests the cable is said to be set at a distance of one mile with the appropriate antenna. The integrated radio chip allows the cable to log on to the local WLAN as a client, allowing you to launch attacks from a greater distance as long as the manipulated charging cable remains connected to the computer and receives power.
Unlike the old version, the new OMG cable is not yet available for purchase. Grover said it will take up to twelve months for certain components to be available again due to the current chip crisis. Miniaturization also makes it difficult to find (or change) the right manufacturers. The first version of the cable was $ 120. Use of such hardware without the permission of the computer owner may violate various laws, but the hardware is also suitable for pre-approved intrusion tests and security checks.
Hardware, software, tests, curiosities, and colorful news from the IT world by clicking here!
