iCloud Ransom - What You Should Know

Blog Author Aaron Robel

Written by: Aaron Robel, VP of Information Security

Published: March 29, 2017

Found in: News/Press

What's Happening with the Apple iCloud Ransom?

Hackers are demanding that Apple pays a ransom or they will remotely erase millions of customer iPhones, iPads, and Macs.  The hackers claim to have access to 250 million accounts and are threatening to reset the passwords on those iCloud accounts and remotely wipe customer devices if Apple doesn't pay the ransom by April 7.

Apple states it hasn't been hacked but that the data came from 'previously compromised third-party services.' The hackers also denied any direct breach of Apple systems and instead claim the data came from breached accounts from other sites and services. The idea is that people use the same account for many sites. 

Some researchers have been able to get some of the account information and validate that SOME of it is in fact valid. There is still no clear view of how many Apple customers may be at risk but taking steps to ensure you're not affected is always a good precaution.

What should I do?
  • Change your iCloud password.
    • Your Apple ID and iCloud password are the same.
    • To change your Apple ID password, sign in to your Apple ID account page with any web browser and follow the instructions to reset your password.
  • Don't use the same password for multiple accounts e.g., email, iCloud, etc.
  • Longer is always better when it comes to a password.  Use a phrase like "I love the rain!" It's easier to remember and it's much stronger than a shorter more complex password.

Read more details in this article from ZDNet.

Aaron Robel, VP of Information Security