Tuesday, March 4, 2025
HomeSecurity NewsFourth Fappening - Hacker Pleads Guilty to Hacking into iCloud accounts of...

Fourth Fappening – Hacker Pleads Guilty to Hacking into iCloud accounts of Celebrities

Published on

SIEM as a Service

Follow Us on Google News

Fourth Fappening Hacker George Garofano,26 plead guilty in Federal court for computer hacking offense and the 26-year-old is going to face a maximum sentence of five years in Federal prison.

He conducted a Spear Phishing attack to obtain the username and password of Celebrities iCloud accounts. “US Department of Justice says Garofano agreed to plead guilty to one count of unauthorized access to a protected computer to obtain information“.

US DoJ says Garofano the Fappening hacker involved in the Phishing activity between April 2013 through October 2014 to obtain the login credentials of Celebrities iCloud accounts.

Garofano admitted that he sent e-mails to victims that appeared to be from security accounts of Apple and encouraged the victims to send him their usernames and passwords or to enter them on a third-party website, where he would later retrieve them.

He later used the credentials to access the victim accounts and to steal information such as private photos and videos from the Celebrities iCloud accounts, also he traded the credentials and sensitive information of victims to other individuals reads plea agreement.

Also Read A Man Used Fruitfly macOS Malware over 13 Years For Spying Thousand of Computers

Most of the Garofano victims are members of the entertainment industry in Los Angeles and many non-celebrities from Connecticut, he illegally gained access to more than 250 accounts.

Sensitive photos of Celebrities are being uploaded online very often these days, maybe they are obtained as part of Fappening hack or other recent hacks and data breaches.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Exploiting AES Encryption for Stealthy Payload Protection

Cybersecurity researchers have uncovered a surge in the use of Advanced Encryption Standard (AES)...

33.3 Million Cyber Attacks Targeted Mobile Devices in 2024 as Threats Surge

Kaspersky's latest report on mobile malware evolution in 2024 reveals a significant increase in...

Routers Under Attack as Scanning Attacks on IoT and Networks Surge to Record Highs

In a concerning trend, the frequency of scanning attacks targeting Internet of Things (IoT)...

Google Launches Shielded Email to Keep Your Address Hidden from Apps

Google is rolling out a new privacy-focused feature called Shielded Email, designed to prevent apps...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Chinese Hackers Breach Belgium State Security Service as Investigation Continues

Belgium’s State Security Service (VSSE) has suffered what is being described as its most...

Check Point Software to Open First Asia-Pacific R&D Centre in Bengaluru, India

Check Point Software Technologies Ltd. has announced plans to establish its inaugural Asia-Pacific Research...

Threat Actors Trojanize Popular Games to Evade Security and Infect Systems

A sophisticated malware campaign was launched by cybercriminals, targeting users through trojanized versions of...