Cyber criminals could hack iPhones, iPads via Comex’s JailbreakMe 3.0

The recently-launched JailbreakMe 3.0 iOS exploit is a massive threat for iDevices, say a group of security analysts. The jailbreak from Comex, a member of iPhone Dev Team, will be utilized by hackers to steal confidential data and take control of an iOS device. Apple iPhone, iPad and iPod Touch that run on iOS 4.3.3 may come under malicious cyber attacks, security analysts warn.

iOS security

Comex launched its iOS jailbreak on Wednesday. The hack works on an iDevice exploiting iOS’ famous glitch in reading a PDF file. JailbreakMe 3.0 is a userland exploit, which means any users can jailbreak their iDevice on clicking a PDF link on JailbreakMe.com in their device’s default Safari browser. The process of jailbreaking, which helps iOS users enjoy unapproved Cydia apps, can be done in a few minutes with the new jailbreak.

JailbreakMe 3.0 is capable to jailbreak any iOS device that runs on the latest version of the software. Apple iPhone 3GS, iPhone 4, iPod Touch Fourth Generation, iPad original and iPad 2 are susceptible to the exploit, Comex says. By the way, it is the first iOS hack that can jailbreak an iPad 2, which has been without any exploits until its release in March 2011.

A number of security experts like Patrik Runald of the Internet security firm Websense have emerged out with the claim that JailbreakMe 3.0 can be a loophole for cyber criminals to break into one’s iOS device. Hackers can easily take control of an Apple device with the jailbreak. They can create a Web site with a PDF file to steal the confidential information of an iDevice owner.

Even the New York-based Comex, the developer of JailbreakMe 3.0 warns Apple of the possibility that hackers will make use his exploit to attack iDevices. Apple used to bring software updates to face up with the situations like this. Indeed, we can soon expect an iOS patch from the Cupertino-based company to fight the new hack. Apple spokeswoman Trudy Muller has said the company has already started working on a patch for the exploit.

Via: Reuters