When Apple launched AirTag, it also added support to the Find My network which means users can use the network to access their connection to AirTag. Unfortunately, it seems there could be a virus / risk with this system that could lead to the “Good Samaritan”.
This is according to a report from KrebsOnSecurity where it was found that while the AirTag Lost Method is supported, Apple does not monitor it to see if a computer number has been entered in the mobile field. What this means is that if someone finds a bad AirTag and watches it with their phone, it can create a program that can direct users to the iCloud login page.
Users who think they are doing well can sign up for an Apple ID to try and support them, but may be robbed of their replacement. Speaking to KrebsOnSecurity, Bobby Rauch, who identified the danger, said he told Apple about this.
When Apple accepted the offer and said it would be updated, it did not respond when asked about the preparation time, whether it would be appreciated, or whether its findings would be eligible for Apple’s participation program. This seems to be a contradiction in terms that some manufacturers and researchers have been frustrated with.
Recently the researcher was he was compelled to make a public statement of his findings handed them over to Apple but received no response. Pursuing unnecessary interest, Apple later agreed and said they are still looking.
Saved Bad, Breaking and Security. Source krebsonsecurity
. Read more about