
They come up when users want to make an app purchase or when account content, like iCloud data, needs to be accessed.
Iphone asking for password captiva.apple password#
And if users make the mistake of using the same password for other services, like banks, sophisticated hackers could target accounts elsewhere.Īpple ID alerts are common fare in a typical day using the iPhone. Accessing a person’s Apple ID would allow malicious hackers to make fraudulent purchases, change passwords, and ultimately use the account’s associated credit card to buy digital goods. Get Data Sheet, Fortune 's technology newsletterĪpple IDs are accounts users create to do everything from buy apps to subscribe to the company’s many online services, including Apple Music and iCloud. when they want to access iCloud, GameCenter or In-App-Purchases. “However, those popups are not only shown on the lock screen, and the home screen, but also inside random apps, e.g. “Users are trained to just enter their Apple ID password whenever iOS prompts you to do so,” Krause wrote in a blog post. If the person inputs the password, the malicious app owner could steal the information and users wouldn’t even know they were targeted.

According to Krause, developers can turn on an alert inside their apps that look identical to the legitimate pop-up requesting a user’s credentials. Security researcher Felix Krause on Tuesday published a proof-of-concept that shows how easy it is for hackers to replicate the familiar “Sign In to iTunes Store” Apple prompt on the iPhone and steal a user’s password. Apple’s iPhone customers could potentially fall victim to a scam that would see them unwittingly hand over their ID credentials.
