Wednesday, January 29, 2025
HomeAppleHackers Use Flipper Zero Device to Attack Nearby iPhones with Notification Pop-ups

Hackers Use Flipper Zero Device to Attack Nearby iPhones with Notification Pop-ups

Published on

SIEM as a Service

Follow Us on Google News

Flipper Zero Devices have been discovered with the capability to perform Denial of Service attacks on iPhones.

Threat actors can probably spam the iPhones with so many pop-ups prompting about nearby AirTag, Apple TV, AirPods, and other Apple devices.

Moreover, Flipper Zero Devices can also perform wireless attacks that target car keyfobs, RFID cards, iPhones, and many more.

Security Researcher Anthony, who discovered this attack, termed this as “a Bluetooth advertising assault”.

Flipper Zero Attack Nearby iPhones

Flipper Zero firmware can be used for conducting a broadcast called “Bluetooth Advertising,” which is a type of transmission in the Bluetooth Low Energy protocol used by Apple for enabling iDevice users to connect to Apple Watch and other Apple devices and send pictures using the Bluetooth file sharing system AirDrop.

TechCrunch was able to replicate the vulnerabilities in both the iPhone 8 and the recently released iPhone 14 Pro models, which could potentially be exploited by attackers.

This was done by changing the Flipper Zero firmware with a custom compiled code. After this, a simple switching “ON” of Bluetooth from Flipper Zero begins the broadcasting of pop-up signals to nearby iPhones.

“The exploits worked on iPhones both when Bluetooth was enabled or switched off in the Control Center, but could not reproduce the exploit when Bluetooth was fully switched off from the Settings,”.

Furthermore, the researcher (Anthony) also said that he was able to create an attack that can broadcast signals over longer distances, even miles, and create pop-ups with millions of devices spamming at a high range.

However, he is not providing more details about the attack as it could lead to a vast attack surface for threat actors who intend to spam victims.

A complete exploit and research was published by Anthony, providing more information about the Denial of Service (DoS) attack.

He also added that Apple could mitigate this issue by verifying the integrity of the Bluetooth Devices connecting to the iPhones. They can also reduce the distance at which iDevices can connect to other devices using Bluetooth.

Keep informed about the latest Cyber Security News by following us on Google NewsLinkedinTwitter, and Facebook.

Eswar
Eswar
Eswar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Latest articles

Vulnerability in Airline Integration Service enables A Hacker to Gain Entry To User Accounts

A recent security vulnerability in a widely used airline integration service has exposed millions...

Hackers Seize Control of 3,000 Companies Through Critical Vulnerabilities

In a groundbreaking cybersecurity investigation, researchers identified several critical vulnerabilities in a target system,...

PoC Exploit Released for Critical Cacti Vulnerability Let Attackers Code Remotely

A critical vulnerability in the Cacti performance monitoring framework tracked as CVE-2025-22604, has been...

TorNet Backdoor Exploits Windows Scheduled Tasks to Deploy Malware

Cisco Talos researchers have identified an ongoing cyber campaign, active since mid-2024, deploying a...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

Vulnerability in Airline Integration Service enables A Hacker to Gain Entry To User Accounts

A recent security vulnerability in a widely used airline integration service has exposed millions...

Hackers Seize Control of 3,000 Companies Through Critical Vulnerabilities

In a groundbreaking cybersecurity investigation, researchers identified several critical vulnerabilities in a target system,...

PoC Exploit Released for Critical Cacti Vulnerability Let Attackers Code Remotely

A critical vulnerability in the Cacti performance monitoring framework tracked as CVE-2025-22604, has been...