Apple and Amazon step up tech support security

AppleCare and Amazon have temporarily made it impossible for consumers to re-set their account passwords with tech support over the the phone

 

The move by the two companies comes in response to a case involving Wired journalist Mat Honan, whose iPad, iPhone and MacBook Air devices were all wiped at the weekend by a hacker who gained access to his iCloud account. The hacker also took control of Honan's twitterfeed and locked him out of his Gmail account.

The hacker, who identified themselves to Honan subsequently using the handle Phobia, claimed they used social engineering to procure his iCloud login details from AppleCare. Social engineering is a technique used by hackers to manipulate people into performing actions or divulging confidential information.

Phobia told Honan that he gained access to his iCloud account over the phone, first by obtaining his credit card details from Amazon's customer support, and then using those details to convince AppleCare that he was Honan. 

In an article in Wired that provides an in-depth look into Phobia's hacking strategy, Honan pointed to the hacker obtaining the last four digits of his credit card from Amazon's customer support team by adding a new credit card to Honan's account. Once armed with this information, says Honan, Phobia then contacted AppleCare and convinced them that he was the US tech journalist.

Both Amazon and Apple have moved to prevent anymore individuals exploiting this loophole in their security.

Wired Magazine reported that they'd spoken to an Apple customer service representative, who said Apple is halting all AppleID password resets by phone.

Amazon told CNET today: "We have investigated the reported exploit, and can confirm that the exploit has been closed as of yesterday afternoon."

Source:Wired, CNET

Comments

Be the first to comment…

Back to top
Close
T3 Newsletter
Sign up to recieve the T3 newsletters by entering your details below

Your Details

As you're registering with us. we'd like to think that you'd enjoy receiving the following emails; if you'd rather not receive them, please untick the boxes:

I would like to receive other emails from T3, Future Publishing Limited and it's group companies containing news, special offers and product information
I agree to the terms of use and privacy policy and confirm that I am over 16 years of age *
Close
Log in or Join

By clicking below you agree to our terms and conditions and our privacy policy

Log in to T3.com with your preferred social network

Log in with your T3.com account

CloseJoinPlease complete these additional details

Join T3.com with your preferred social network

OR

Join T3.com

Please tick this box to confirm you are 16 years old or over

Just so we know you're human

Newsletters

I would like to receive T3 email newsletters, packed full of the latest tech news, competitions and exclusive offers.

I would like to receive other emails from T3, Future Publishing Limited and its group companies containing news, special offers and product information.

I would like to receive offers from carefully selected third Parties. We will not share your data with the third party.

Close Edit your profile

Change your password

Newsletters

I would like to receive T3 email newsletters, packed full of the latest tech news, competitions and exclusive offers.

I would like to receive other emails from T3, Future Publishing Limited and its group companies containing news, special offers and product information.

I would like to receive offers from carefully selected third Parties. We will not share your data with the third party.

Social networks

You have authorised these social networks to interact with your T3.com account.

Please ensure you deactivate or revoke access to this website from within your social networks settings to ensure all permissions are removed.

Close Forgotten your password

Forgotten your password?

Please enter the email address that you used to sign up and we'll send you a new password

Close
Forgotten password
Don't have a T3 Account? Join now