iOS 10.3 Security Patch: Fix for Ransomware-Prone Mobile Safari Exploit Released
Reports have it that the latest version of iOS 10.3 that just arrived comes with a fix for the Mobile Safari browser flaw being exploited by hackers. The exploit makes use of ransom malware to extort money from iOS users.
Ransom malware, aka ransomware, is one of the ways utilized by hackers to scam money from people, especially those who do not fully know their way around gadgets and technology. This type of malware infects a user's PC or mobile system and subsequently locks their files. The data of the affected device is practically held hostage by the hacker and can only be accessed after the victim pays the requested sum of money.
There are varying types of attacks using ransomware. One of the recent ways victimized iOS 10 users by way of a Mobile Safari browser exploit. But according to a blog post by the mobile-focused cybersecurity company, Lookout, Apple was able to provide a fix for the Mobile Safari browser exploit on iOS when the latest iOS 10.3 version went live on Monday. Lookout further explained that the new iOS version simply "changed how Mobile Safari handles JavaScript pop-ups."
Lookout also revealed that the newly fixed Mobile Safari issue did not really lock out victimized iOS owners.
Lookout explained that hackers tricked victims into opening a link that would trigger the Mobile Safari exploit. The targeted person will then think they have been locked out of the app because pop-up dialog boxes that say "Safari cannot open page because the address is invalid" will keep on appearing even after restarting the browser.
This will inflict fear on the victims and will make them think their devices have been infected by ransom malware because hackers will follow up with the demand to be paid with a certain amount of money or iTune gift cards to resolve the issue.
However, Lookout shared that what iOS users do not know is they can unlock their mobile Safari browsers easily even before Apple released the iOS 10.3.
Lookout further explained that the said attacks can be countered by simply clearing the browser's cached data and history through the Settings app. "The attack doesn't actually encrypt any data and hold it ransom," the cybersecurity company added.