Apple Airtag is a small GPS tracker that helps find items attached to it.
Even if you don’t use an iPhone, you can scan the lost airtag with your Android phone via NFC and restore it to the legitimate owner.
But before you think of a good Samaritan, note that new security defects have been found which can effectively change Apple Airtag to “Trojan”, according to the report by KrebonseCurity.
This means if you scan an unknown apple airtag that is charged ‘Mode’ there is a risk of your cellphone infected with Apple Airtag launched just a few months ago and was armed.
In fact, airtags can be a cheap and easy way to attack a smartphone some innocent pedestrians who just try to help someone in finding missing.
Security researchers Bobby Rauch in posts on the media explains that iCloud credentials can be hijacked if you scan the programmed airtag that has been programmed.
When you scan lost airtag through NFC on your mobile, you are directed to the unique “https: /found.apple.com page.
This page provides information such as the serial number along with the owner’s telephone number and private message.
Rauch explained that “the attacker can do XSS stored on the page https://found.apple.com, by injecting a dangerous charge into the field of telephone number” lost mode “airtag.” He further added, “a victim will believe they are asked to enter iCloud so they can contact the owner of the airtag, even though actually, the attacker has directed them to the piracy pages of credentials.
Other XSS exploitation can be done as well as session token piracy, clickjacking, and a lot again.
an attacker can make airtag armed, and leave it, sacrifice innocent people who just try to help someone find their lost airtag.
“Alarming is that, he claimed that” There are many attackers can sacrifice the end user Find the lost airtag.
” For those who are unconscious, you must have an iPhone to use airtag.
This tracker does not work with an Android phone.
After saying that, you can use an Android phone with NFC to remind airtag owners if you find the lost airtag.