Apple warned of phishing attack threat to iPhone, iPad and Mac OS developers

27.06.2011
's for Mac OS X, and developers has a vulnerability that could lead to phishing attacks, according to a hacker group.

The Apple website vulnerability could allow an attacker to specify a link to another site through a "redirect," which could simplify phishing attacks, claims the YGN Ethical Hacker Group. The outfit, dedicated to finding website flaws, is said to operate from the country of Myanmar.

Unless Apple fixes the alleged vulnerability, the group says it plans to release information publicly in the next few days via the Full Disclosure security mailing list.

SECURITY:

This is the practice that the group followed in March when it was frustrated by what it considered a slow response by security firm about vulnerability issues it found in its website. After public disclosure by the group, McAfee acknowledged the problems.

YGN Ethical Hacker Group says it doesn't want the discoveries it makes about vulnerabilities to be used for illegal hacking purposes, but to spur better security in commercial websites. The group says it informed Apple on April 25 about the" issues" it discovered at the . The group says Apple on April 27 acknowledged the receipt of the information, saying, "We take the report of a potential security issue very seriously." But as of yet, YGN Ethical Hacker Group does not believe the main security hole it identified has been fixed.