[Updated]: Users who used the Pangu jailbreak report unauthorized access to their accounts

HACKED PANGU

IOS devices use a fairly secure operating system, but also somewhat limited. That is the reason why the jailbreak exists, to be able to do everything that Apple does not want us to do. The problem with jailbreak is that, at the same time that we open a door to a whole range of possibilities, we open a door to malicious software. And it is that many users who used the latest Pangu tool they are reporting something concerning.

It seems that some users who jailbroken with Pangu's new tool have seen how several of your accounts have been used in an unauthorized manner, as we can read in Reddit. At this point it seems very important to mention that this problem may be happening just after the last launch of the Chinese hacker team just by coincidence; At the moment it is not confirmed that it bears any relation.

Is the latest Pangu jailbreak safe?

The main reason why the latest jailbreak is mistrusted is that we are asked for our Apple ID at some point in the process. Logically, after performing a process that breaks the chains of iOS, good and bad, in which we have to provide our credentials, the most logical thing is to think that the violation of the accounts has something to do with the last jailbreak, although we repeat what not yet confirmed to be related.

Users who have seen their accounts compromised agree that they used the Windows PPHelper tool, so it is likely that this tool contains malicious code that sends the credentials to a server for further fraudulent use.

Security

So far, affected users say they have accessed their Facebook, PayPal, and credit and debit accounts. Most likely, if it is confirmed that the PPHelper tool is the culprit, the affected users will give their Apple ID and use the same credentials in other accounts, so it is not ruled out that they can also access other accounts in addition to the ones. 3 above.

Saurik trusts Pangu ... but not 25PP

Saurik says he trusts PanguBut not sure of the routes of diffusion that the Chinese hacking team can use. Also, you don't like having to install the 25PP tool. It is assumed that Cydia Impactor, the software with which the jailbreak is installed in its English version and that Saurik himself has created, is clean because it does not install anything from 25PP. The downside is that it works from the 25PP servers and the possibility that they have modified the software is not ruled out, so nothing can be taken for granted. Most of the affected cases have taken place in Asia, but it is not ruled out that it will happen in more countries due to all of the above.

All this shows that we must always be very careful, especially when we jailbreak our device. If any software of questionable origin asks us for our Apple ID, it is best not to give it to them. And if we need some of that software, it's worth creating an account just to go through the process. The question now is: do we trust Pangu?

UPGRADE: Pangu has opened a Reddit account and is investigating the case. They say that MySpace and Tumblr have been hacked this year and they want to know if the affected users used the same credentials. They also say that neither they nor 25pp would be “so stupid to make money hacking into users' PayPal accounts through a jailbreak tool. We hope to discover the truth as soon as possible.


You are interested in:
According to Apple, it is the most effective company in the world in security
Follow us on Google News

Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.

  1.   Mike! said

    Oysters, it's true !! I have several access emails from different browsers to my account, Be very careful !!

    1.    Joni said

      Troll

  2.   iOSs said

    Do we trust Pangu? Of course NOO. I already mentioned it in a comment, do not give your ID and password to anyone, much less to some Chinese, I hope it serves as a lesson and you do not think that I am against jailbreak, far from it, but the issue of privacy is very important. Greetings to the people of actualidadiphone

  3.   Nero said

    It has already been said a thousand times that you did not put your id in the tools but many people are blinded, they do not ask or read, as easy as changing passwords for whom that is stupid and voila and deactivate the card payment method and voila choosing none and 0 problems .

  4.   Nose said

    Well, they have already been told that they add a new apple id account just to do the jailbreak, they do not have to use an account with which they have all their personal information except if they have registered some form of payment, create a free account and not put all your personal information, well at least I did it and it works well for me,

  5.   Sergio said

    On my iphone I have the jailbreak with pangu and an apple id created just for that. For now I have not received any login or anything weird

  6.   Aitor Aleixandre Badenes said

    How can you remove the jail without restoring the terminal?

    1.    Neron said

      Ilex RAT, look for a tutorial on youtube or similar

  7.   Juan said

    During the jailbreak process he never asked for my ID, so I continued. Is my terminal also vulnerable to these things?

    1.    Neron said

      It does not have because Juan, he did not ask me for ID either, but there was one thing that I did not like ... .. I tried to run the PAYPAL app and it did not open with the pp25 jailbreak instead with pangu yes, weird but true. But try !!!!

      1.    Juan said

        The paypal app does not open for me either. And my bank does not let me use the touch ID.

        1.    iOS 5 Forever said

          Because those applications detect that you have jailbreak. It doesn't matter if it's pangu, saurik, pepe or so-and-so.

  8.   Nobel Silva said

    Hi, I jailbroken my iPhone 6 plus 9.3.3 with the pangu tool (Chinese version) and it never asked me for an itunes credential, at least I didn't have to put any of that (weird), but it goes from luxury on the iphone. and I have not received any email from unauthorized entry in any of my accounts (facebook, paypal, etc). which does not mean that I trust these Chinese, especially 25pp, because it is rare that they ask you for access to your itunes account. What I recommend to those who ask for an account is that you create a fake iTunes account, because with hackers you always have to be one step ahead.

  9.   jbr said

    you have to be mongo to get into that nowadays people seem stupid

    1.    Chayan said

      Here the only Mongolian is you, hee, if you don't know how to do the jail, the problem is yours, troll

  10.   Su said

    If we have set Apple password, changing it will be enough ????
    He asked and I put the real one but I already changed the password

    1.    marxter said

      It is best to change the password

  11.   Giorat23 said

    Hahahahaha that happens to them for doing the garbage of the jailbreak to their iPhones! If you want customization, buy a damn android that will also see these problems ..

    1.    Chayan said

      An android is a real rubbish compared to an iPhone that has less support than the domino table in the corner bar tsss that you know crazy

    2.    iOSs said

      -1 and I am the first to criticize this jailbrelk they have nothing to do with android with the jailbeak

    3.    iOS 5 Forever said

      Shut up, clown

  12.   Juan Fran (@ Juan_Fran_88) said

    I did it with the Chinese tool the same day it came out and putting the apple id (new account for that), and I checked the email associated with that account and I have no email attempting to access the account

  13.   Alf said

    Thanks !!, it works perfectly… Cydia's Sibstratw theme… how much alarmist there is…

  14.   Fran said

    I did the jailbreak on Wednesday and I did not have to give my Apple ID or my password at any time, I do not know how we will open it, I am sure that nothing will happen to me

  15.   iOS 5 Forever said

    Another clown recommending lagdroid. Go to another forum with your lagdroid and customize it as much as you want

    1.    IOS 5 Clown Forever said

      Wow, are you allowed to call everyone a clown? Well, here is my contribution: IMBECIL.

      PS: It shows that you have stayed in IOS 5 to talk about lagdroid, pringao.

  16.   Vinyl said

    To have jail, better Android

  17.   July said

    I do not know if the hacker the jb if quivers havelock Pedro despise of Estonia gives me Mindoro jijijijijij it sounds like terror sequel to verdant I do not know Poe that they have the Apple ID that demean Asher the jailbreak that combo quivers cope ramps for developers

  18.   Aurelio said

    The tool did not ask me for my Apple ID, I had a new one ready but it did not ask me
    It was not until the iPhone started that he asked me and I put the good
    To install the Saurik tool you must have developer access if you did not have to repeat the process every week
    The JB has not been safe, it may have been more or much more before than now, but it never was