Apple iCloud phishing campaign INVOLVES Brute-force attack
Some attackers used iDict to cycle through commonly used passwords against iCloud accounts.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Basically it’s a brute force login tool.”
Technique
technique:brute_force_attack
Also: brute force, brute force login, password brute force
High-volume password-guessing activity discussed as an ineffective assumption for defending against credential attacks.
High-volume password-guessing activity discussed as an ineffective assumption for defending against credential attacks.
“high-volume, noisy, brute force attack against every possible password”
Repeated login attempts using commonly used passwords against an account.
“Basically it’s a brute force login tool.”
“it will cycle through thousands of commonly-used passwords”
Attack used to gain access to an E-Trade video teleconferencing server.
“the hacker breached E-Trade’s server using a brute force attack”
Repeatedly trying a finite set of password combinations to discover a weak password.
“You could brute-force that in about fifteen minutes”
“try everything between 00000 and 99999”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | Apple iCloud phishing campaign | Explicit | 34 |
| incoming | USES | iDict | Explicit | 34 |
| incoming | USES | John Doe | Explicit | 76 |
| incoming | USES | Jason Haddix | Explicit | 130 |
Apple iCloud phishing campaign INVOLVES Brute-force attack
Some attackers used iDict to cycle through commonly used passwords against iCloud accounts.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Basically it’s a brute force login tool.”
iDict USES Brute-force attack
iDict performs brute-force login attempts against an iCloud username and can bypass the lockout mechanism, according to the episode.
Explicit Confidence 96% · Jack Rhysider EP 34 Details
“iDict was somehow able to bypass that lockout mechanism.”
John Doe USES Brute-force attack
The unidentified hacker used a brute-force attack to access an E-Trade video teleconferencing server.
Explicit Confidence 99% · Jack Rhysider EP 76 Details
“the hacker breached E-Trade’s server using a brute force attack to gain access to a video teleconferencing server”
Jason Haddix USES Brute-force attack
Jason brute-forced the five-character reset password in approximately fifteen minutes.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“You could brute-force that in about fifteen minutes”