The security researcher demonstrated that these cables do their job well, and Apple’s security can’t do anything about it.
A security researcher going by the MG has created a Lightning cable for charging an iPhone that has a chip that can record whatever you type. The charging cable can then transfer everything typed to someone else remotely while connected to the device. According to a report by Vice, if you connect this calble to charge your iPhone while typing passwords for banking websites or social media, the information will be relayed instantly.
The security researcher demonstrated that these cables do their job well, and Apple’s security can’t do anything about it. The alarming part is that the researcher plans to mass-produce and commercialise these charging cables.
According to the report by Vice, “MG previously demoed an earlier version of the cables for Motherboard at the DEF CON hacking conference in 2019. Shortly after that, MG said he had successfully moved the cables into mass production, and cybersecurity vendor Hak5 started selling the cables.”
The charging cables are known as ‘OMG Cables,’ and “they work by creating a Wi-Fi hotspot itself that a hacker can connect to from their own device. From here, an interface in an ordinary web browser lets the hacker start recording keystrokes,” it added.
The cables also have “geofencing features,” which allow users to “trigger or block the device’s payloads” based on where they are utilised. MG told Vice “It pairs well with the self-destruct feature if an OMG Cable leaves the scope of your engagement and you do not want your payloads leaking or being accidentally run against random computers,”
Despite the limited area available inside charging cables, it is alarming that a powerful chip capable of leaking critical information to a person a mile away can be inserted.