This Apple Mail Flaw Could Expose Your iCloud Password
By Kamal Nayan - 12 Jun '15 05:13AM
A flaw in Apple Mail in iOS 8.3 could be exploited to trick users into giving away their iCloud passwords, according to a researcher.
Jan Soucek published tools that he said could exploit the bug, as he claimed he already warned Apple about it.
"Back in January 2015 I stumbled upon a bug in iOS's mail client... but the fix was not delivered in any of the iOS updates following 8.1.2," he said.
Here's the video of the demo of the bug:
Another report from PC World said the roof-of-concept code showed an attacker can send an email to someone with HTML code that resembles the iCloud login pop-up window. However, Apple has put security measures like two-factor authentication, that should be good enough to combat such phishing attacks.
