Replica AirTags can track you without warning
A hacker was able to track a person unnoticed for five days with a replica AirTag. The hacker wants to point out security problems with Apple’s AirTag.
The stalking and security problem with the Apple AirTag runs deep. A hacker has now demonstrated this clearly: He was able to track a person for five days with a modified Airtag. The person being pursued did not receive any messages or notifications. The experiment was mutually agreed with the person.
Hacker builds counterfeit AirTag
The hacker’s goal was to draw Apple’s attention to the risk of unofficial AirTags. To do so, he created a “Stealth AirTag,” which includes a power bank and ESP32 firmware. As a result, this fake AirTag has no serial number and is not associated with an Apple ID.
The hacker has gradually worked through the security functions specified by Apple. For example, the loudspeaker that is supposed to play a notification sound: The hacker’s AirTag simply has no speaker, which circumvented this first issue. He points out that air tags with manipulated loudspeakers can be bought online already.
Monitored are not notified via AirTag
The notification that an AirTag is moving with the individual was also bypassed. The modified AirTag constantly sends new signals that the iPhone has not received before. The smartphone is fooled into believing that there are always new air tags in its vicinity and that no one is moving with it.
Only one app recognized the fake AirTag
Only the “Airguard” app created by the TU Darmstadt was able to recognize the AirTag clone. In the manual scanning function, the app automatically assigns a new device to each detected signal. This is how the app also recognizes the replica AirTag.
Overall, the hacker’s attempt showed how difficult it is for those being pursued to recognize an AirTag, especially if it has been copied or modified. The hacker hopes that his experiments have contributed to improved security.
By Disclose.tv
Appeared on fml.lol
