Manipulated iPhone charger cable now for sale!
A manipulated iPhone charging cable brings along various dangerous attack scenarios and transmits data via WLAN up to 90 meters home. It takes quite a bit of cr...
Chris Wojzechowski Geschäftsführender Gesellschafter TL;DR
Security researcher Mike Grover created the O.MG Cable, a Lightning-to-USB cable that looks indistinguishable from a standard Apple charger but contains a hidden WiFi chip enabling remote keystroke injection from up to 90 meters away. The cable can also display fake lock screens to capture PINs. Originally demonstrated at DEF CON 2019, it is now commercially available from Hak5 for $120. The cable's effectiveness in social engineering attacks makes it a compelling live hacking demonstration tool.
Table of Contents (3 sections)
A manipulated iPhone charging cable brings along various dangerous attack scenarios and transmits data via WLAN up to 90 meters home. It takes quite a bit of creativity to create products that hardly cause scepticism and are often and gladly used. But this is exactly what security researcher Mike Grover has succeeded in doing. With a charging cable from USB-A to Lightning.
As long as the cable is plugged in, the attacker can make entries
Whether it connects to a Mac or Windows PC, it works on both systems. The tampered cable, indistinguishable from standard cables, logs on to the computer as a keyboard. Attackers can now make entries on the computer at a maximum distance of 90 metres. But tricks such as displaying a false lock screen also ensure that potential victims disclose their own PIN. As soon as the cable is pulled, the attack stops. But for this, the attack must be detected. Unlike former software bugs under iOS. The cable was presented in detail at Defcon 2019. Already at that time the cable was much discussed. It was only available in small quantities. Especially with regard to social engineering attacks, an iPhone charging cable is a perfect camouflage. Why not count them as scarce goods and they are needed everywhere else all the time. https://twitter.com/\_mg\_/status/1116830138195304449?lang=de
The manipulated iPhone charging cable is now available in stores
Among other things, the cable was made to show very clearly that it is not a good idea to plug in foreign hardware in an uncontrolled way. The message is clear "don't just take any charger and plug it into your computer! Meanwhile the charger cable is available at the Online-Shop Hak5, which is specialized on hacking gadgets. But for the small purse the purchase is nothing. The white charging cable is available from 120 USD. On Lightning you are not limited USB-A to USB-C or USB-A to Micro-USB is also available. The cable is called "O.MG Cable" (Offensive MG). 
Zu teuer für ein normales Ladekabel. Das manipulierte iOS Ladekabel startet bei 119.99 USD (Quelle: Screenshot Hak5.com)
Experience the O.MG Cable live during our Cyber Security Show!
To see is to experience. True to the motto, AWARE7 GmbH regularly creates new hardware and software in order to constantly create new hacking scenarios. Now in its fourth year, we are conducting Live Hacking & awareness campaigns at selected companies. From 2016 to 2018 still under the Institute for Internet Security - now for two years under our own flag. If we have aroused your interest, please feel free to inform yourself about our Live Hacking Show and contact us in Contact us.
Monthly Threat Report
Chris Wojzechowski bewertet einmal im Monat die aktuelle Bedrohungslage aus Sicht eines Informationssicherheitsexperten. Sein 30-köpfiges Team ist näher an realen Cyberbedrohungen dran als kaum jemand sonst - mit konkreten Handlungsempfehlungen, die Sie am nächsten Morgen umsetzen können.
Bestseller-Autor (Wiley-VCH) · M.Sc. Internet-Sicherheit · Bekannt aus Handelsblatt & WamS
Zuletzt behandelt
1x im Monat · Kein Spam · Jederzeit abbestellbar · Datenschutz
Next Step
Our certified security experts will advise you on the topics covered in this article — free and without obligation.
Free · 30 minutes · No obligation
