Apple's Find My Network Exploit Lets Hackers Silently Track Any Bluetooth Device
(Thursday February 27, 2025 @10:30PM (BeauHD)
from the PSA dept.)
- Reference: 0176566347
- News link: https://yro.slashdot.org/story/25/02/28/013227/apples-find-my-network-exploit-lets-hackers-silently-track-any-bluetooth-device
- Source link:
Researchers at George Mason University [1]discovered a vulnerability in Apple's Find My network that [2]allows hackers to silently track any Bluetooth device as if it were an AirTag , without the owner's knowledge. 9to5Mac reports:
> Although AirTag was designed to change its Bluetooth address based on a cryptographic key, the attackers developed a system that could quickly find keys for Bluetooth addresses. This was made possible by using "hundreds" of GPUs to find a key match. The exploit called "nRootTag" has a frightening success rate of 90% and doesn't require "sophisticated administrator privilege escalation."
>
> In one of the experiments, the researchers were able to track the location of a computer with an accuracy of 10 feet, which allowed them to trace a bicycle moving through the city. In another experiment, they reconstructed a person's flight path by tracking their game console. "While it is scary if your smart lock is hacked, it becomes far more horrifying if the attacker also knows its location. With the attack method we introduced, the attacker can achieve this," said one of the researchers.
Apple has acknowledged the George Mason researchers for discovering a Bluetooth exploit in its Find My network but has yet to issue a fix. "For now, they advise users to never allow unnecessary access to the device's Bluetooth when requested by apps, and of course, always keep their device's software updated," reports 9to5Mac.
[1] https://cec.gmu.edu/news/2025-02/find-my-hacker-how-apples-network-can-be-potential-tracking-tool
[2] https://9to5mac.com/2025/02/26/exploit-find-my-track-devices/
> Although AirTag was designed to change its Bluetooth address based on a cryptographic key, the attackers developed a system that could quickly find keys for Bluetooth addresses. This was made possible by using "hundreds" of GPUs to find a key match. The exploit called "nRootTag" has a frightening success rate of 90% and doesn't require "sophisticated administrator privilege escalation."
>
> In one of the experiments, the researchers were able to track the location of a computer with an accuracy of 10 feet, which allowed them to trace a bicycle moving through the city. In another experiment, they reconstructed a person's flight path by tracking their game console. "While it is scary if your smart lock is hacked, it becomes far more horrifying if the attacker also knows its location. With the attack method we introduced, the attacker can achieve this," said one of the researchers.
Apple has acknowledged the George Mason researchers for discovering a Bluetooth exploit in its Find My network but has yet to issue a fix. "For now, they advise users to never allow unnecessary access to the device's Bluetooth when requested by apps, and of course, always keep their device's software updated," reports 9to5Mac.
[1] https://cec.gmu.edu/news/2025-02/find-my-hacker-how-apples-network-can-be-potential-tracking-tool
[2] https://9to5mac.com/2025/02/26/exploit-find-my-track-devices/
I needed another reason (Score:2)
by Slashythenkilly ( 7027842 )
So pathetic that Apple wont open up its network to help you find lost or stolen equipment but theives can. Its all about future sales, not thd customer's security or safety.
sounds useful! (Score:2)
by Gravis Zero ( 934156 )
> Apple's Find My Network Exploit...
I would pay top dollar for that product. Of course it's an Apple product so I would be paying top dollar for that product. ;)
Turn off your Bluetooth (Score:3)
Might suck for people actually using it for something like earbuds but turn off your Bluetooth on everything.