Apple AirTag Bluetooth Tracker Hacked, Claims a Security Researcher

Apple AirTag, the Bluetooth tracker that was unveiled final month to let folks discover their misplaced gadgets, is claimed to have some safety loopholes that might permit hackers to change its firmware. A safety researcher has demonstrated the loopholes by hacking the AirTag utilizing reverse engineering. The researcher claimed on Twitter that he was in a position to modify the default NFC hyperlink accessible by way of the tracker by reflashing its microcontroller. This seems to be the primary profitable “jailbreak” try on the AirTag, which Apple claims to be designed with privateness and safety at its core.

German safety researcher Thomas Roth who goes by the identify “stacksmashing” on social media tweeted on Sunday that he was in a position to efficiently hack the Apple AirTag by “breaking into” its microcontroller. He claimed that after having access to the microcontroller, he reprogrammed the AirTag and modified its firmware.

The adjustments made by the safety researcher allowed him to tweak the performance of the AirTag and put a customized NFC hyperlink when it’s within the Lost Mode, as proven in a video posted on Twitter.

Normally, when the AirTag is within the Lost Mode, it shows a notification when scanned by an NFC-capable smartphone, reminiscent of an iPhone or an Android smartphone, with a hyperlink to the discovered.apple.com web site (a part of the Find My community) to show details about the proprietor.

The hackers may be capable of leverage the loopholes showcased on Twitter to focus on those that discovered the misplaced AirTag to malicious web sites, as an alternative of displaying details about the consumer. However, Roth did point out in his tweets that it took hours for him to deliver modifications. He additionally stated that he bricked a few AirTags earlier than reaching success.

Apple claimed privateness and safety because the core options of the AirTag on the time of its official announcement final month. However, the tweets posted by Roth counsel that the Cupertino firm might must deliver an replace to dam firmware-level modification.

Gadgets 360 has reached out to Apple for a remark and can replace this house when the corporate responds.