HomeTech infoTechnology story

WiFi error when connecting to a special network name that can be used to hack iPhone

Initially, this bug can disable the iPhone's WiFi connection when connecting to a network whose name (SSID) includes a special character. However, not only that, this bug can also be exploited to hack into iPhone.

Researchers from the startup ZecOps have discovered that based on a WiFi connection error on iPhones, it can be exploited to execute malicious code remotely without user interaction. They named this type of attack WiFiDemon.

While trying to exploit the vulnerability, ZecOps tried adding the SSID name "%@", a format for printing and formatting objects in Objective-C, the programming language for iOS software.

WiFi error when connecting to a special network name that can be used to hack iPhone Picture 1

According to ZecOps, if they find an object released on the stack, they can use injection to control the contents of that memory. Next, they use "%@" to treat it like an Objective-C, such as a typical Use-After-Free that could lead to remote code execution.

The researchers succeeded by simply adding "%@" to the SSID. One scenario that can lead to remote execution of malicious code on the target device is to create a malicious WiFi network and wait for the victim to connect.

On previous iOS versions, even the victim does not connect to WiFi containing malicious code, the WiFi service also crashes and restarts continuously right after reading the SSID is intentionally misspelled. If the bug is exploited locally, an attacker can create a temporary sandbox to jailbreak the device.

ZecOps shared that they found no evidence that WiFiDemon was exploited by hackers. However, it is not excluded that cybercriminals already know about this vulnerability and are looking to exploit it.

WiFiDemon is especially dangerous on iOS 14 to iOS 14.4 because it does not require user interaction. However, Apple released an update to fix the problem in January 2021.

In its safety recommendation, ZecOps recommends that users update their iPhones to the latest iOS version. In addition, users should turn off the automatic WiFi connection feature.

As expected, the iOS 14.7 update that Apple recently released will fix the problems reported by ZecOps. However, in the iOS 14.7 update information, Apple does not mention this issue.

4 ★ | 2 Vote

You should read it

May be interested

  • The most effective way to fix errors in computers and laptops that cannot connect to wifiThe most effective way to fix errors in computers and laptops that cannot connect to wifi
    there are many possible reasons why you cannot connect to wifi, the device reports a wifi error, or connects to the network. common fixes such as resetting the wifi modem or connecting to another wifi network can fix this problem. however, when the above methods are not effective, you can refer to the most effective ways to fix errors of computers and laptops not connecting to wifi compiled by tipsmake below.
  • Fix the WiFi connection of iPhone and iPad when on iOS 8Fix the WiFi connection of iPhone and iPad when on iOS 8
    a lot of customers complained about ios 8, especially the problem of battery drain and wifi connection or trouble, the daily life is slightly disturbed. while waiting for apple to thoroughly fix the redmondpie.com technology page, it gave a little trick to fix the wifi error currently encountered, if you have a similar situation, you should consult.
  • Instructions for fixing WiFi error with yellow exclamation mark - Common error when using Wifi networkInstructions for fixing WiFi error with yellow exclamation mark - Common error when using Wifi network
    the error of wifi with a yellow exclamation mark is quite common in wifi devices, causing computers to not be able to catch wifi. this error occurs when ip conflicts or a large number of people connecting to wifi lead to a limited network.
  • 6 ways to fix Wifi connection errors on iPhone 66 ways to fix Wifi connection errors on iPhone 6
    the problem of ios 9 connection error (iphone 6, iphone 6 plus) also happens quite often. the problems that ios 9 users often encounter such as not being able to connect to the ever-connected wi-fi network, enter the correct password but cannot connect ...
  • Fix iPhone error not connecting to computerFix iPhone error not connecting to computer
    you are not the only one experiencing the iphone not connecting to the computer error. many people are facing this annoying problem. the cause could be something as simple as a broken cable, a driver issue, or a faulty version of itunes.
  • Discover new ways to hack WPA3 protected WiFi passwordsDiscover new ways to hack WPA3 protected WiFi passwords
    earlier this month, it was the cyber security team that found dragonblood to continue to release two more serious vulnerabilities that could allow an attacker to easily hack the target wifi password.
  • 8 best Wifi analysis and hacking software8 best Wifi analysis and hacking software
    pentest security analysis and security evaluation is an integral part of creating any kind of secure network. to create a secure network, developers use wi-fi hacking software to test wireless networks and make modifications. this article will introduce you to the best hacking and analyzing wi-fi tools.
  • How to fix laptop error not connecting to WiFi, fix laptop error not receiving WiFiHow to fix laptop error not connecting to WiFi, fix laptop error not receiving WiFi
    there are many reasons why a laptop cannot connect to wifi and therefore there are many ways to fix the error. if your laptop cannot access wifi, you can try the methods below to fix this situation.
  • Fix 'Unable to Join Network Failure (error -3)' error on iPhoneFix 'Unable to Join Network Failure (error -3)' error on iPhone
    unable to join network failure (error -3) error message appears on iphone when wi-fi network is not connected. in fact, the reasons for this are the same as for computers that are not connected to a home network or wireless hotspot.
  • Fixing the error 'WiFi doesn't have a Windows 10 configuration IP validation'Fixing the error 'WiFi doesn't have a Windows 10 configuration IP validation'
    however, in some cases if the ip address of the system (internet protocol) is misconfigured, it will cause a 'wifi doesn't have a ip configuration validate' or 'ethernet doesn't have a configuration ip validation' or 'wireless network không có một cấu hình ip hợp lệ'.

Technology story