In the realm of cybercrime, a group identifying as the Turkish Crime Family recently claimed a notable achievement, announcing they possessed stolen iCloud credentials. However, they didn’t demand the classic case of suitcases filled with cash. Instead, they seemingly fancied a more digital form of payment, asking Apple to hand over $75,000 in Bitcoin, or as an alternative, $100,000 in iTunes gift cards. Their claims were accompanied by a detailed Motherboard report, where they revealed they had provided proof of the stolen accounts to a member of Apple’s security team and broadcasted a YouTube video showing purported iCloud records.
Despite being asked by Apple’s security team to remove the potentially incriminating video due to it garnering “unwanted attention”, the hackers have remained unyielding. They’ve threatened to put the stolen credentials into action by resetting various iCloud accounts and remotely wiping the Apple devices of their victims on April 7, if their ransom demands are not met by Apple.
In a turn of events, Apple has outright denied these allegations, dismissing them as a pitiful attempt at blackmail. Yet, in an intriguing counter, the band of hackers disseminated screenshots of their alleged conquest to multiple news outlets, one of them being The Next Web (TNW) which states it has confirmed at least some authenticity, albeit noting that not all leaked credentials appear functional. According to TNW, the Turkish Crime Family interestingly disclosed that all prior communication with Apple and Motherboard was led by a member who has since been expunged from their team for their “inaccuracy” and “lack of professionalism”. They hold firm that all ongoing conversation with Apple is being kept confidential, thereby denying the credibility of Motherboard’s initial report.
Since then, Apple has staunchly maintained the security of its 600 million email and iCloud accounts, asserting that their security department has detected no signs of breach. In an interview with Fortune, a spokesperson for Apple stated, “There have not been any breaches in any of Apple’s systems including iCloud and Apple ID. The alleged list of email addresses and passwords appear to have been obtained from previously compromised third-party services.”
Amidst these swirling claims and counterclaims, one must consider the scenario of the hackers actually possessing at least some sort of compromising information. Addressing this, Apple has assured its users that they are on high alert, actively monitoring for any unauthorized access to user accounts and are in touch with law enforcement agencies to identify the culprits. They suggest that the user community adopt strong passwords, avoid using identical credentials across various sites, and enable two-factor authentication to ensure their online safety.
One cannot forget the painful lesson from the Yahoo breach – that hackers are capable of infiltrating company servers and remaining undetected for years. As the world continues to wait on this unfolding digital power-play between Apple and the alleged hackers, only time will reveal the final outcome.