nRootTag: 1.5 Billion iPhones Used for Malicious Tracking

Summary: Researchers at George Mason University have identified a critical vulnerability named nRootTag, which allows remote attackers to exploit Bluetooth-enabled devices, transforming them into trackers for precise location monitoring via Apple’s Find My network. This method can put over 1.5 billion iPhones at risk of being used as tracking agents. Despite Apple’s awareness and the recommendations for urgent updates, the vulnerability remains unpatched, with a complete resolution potentially taking years.

Affected: Apple (iPhones and Find My network)

Keypoints :

• nRootTag vulnerability enables remote tracking of devices by exploiting Bluetooth connections.
• Attackers can utilize cloud rentals for GPUs to crack encryption and access tracking capabilities.
• Existing encryption measures implemented by Apple may be insufficient to protect against this attack.