\n
![\"Checklist](\"https:\/\/www.securemac.com\/wp-content\/uploads\/2024\/11\/post-img-2-3.jpg\")
\t\t<\/span><\/p>\nInactivity Reboot\u201d Feature in iOS 18.1 Poses New Challenges for Law Enforcement, Enhances Security<\/h2>\n
A new feature quietly introduced in Apple\u2019s iOS 18.1 update, known as \u201cInactivity Reboot,\u201d has drawn scrutiny from law enforcement and prompted discussions around iPhone data security. According to recent reports, this feature causes iPhones to reboot automatically after extended periods of inactivity, transitioning them from a more vulnerable \u201cAfter First Unlock\u201d (AFU) state to a more secure \u201cBefore First Unlock\u201d (BFU) state, complicating data extraction for forensic purposes.<\/p>\n
The issue first emerged when law enforcement officials in Detroit noted unexpected reboots on iPhones stored in forensic labs, initially suspecting covert communication between the devices. MacRumors<\/a> and 404 Media<\/a> report that officers encountered iPhones spontaneously restarting despite being placed in secure environments, including faraday boxes, which block all electronic signals. This led to speculation about a hidden mechanism within iOS that Apple had not publicized.<\/p>\n Security researchers, however, have since clarified that the feature is not a bug but an intentional design aimed at bolstering user data security. Bleeping Computer<\/a> reports that iOS 18.1\u2019s \u201cInactivity Reboot\u201d kicks in after approximately four days of device inactivity, reverting the device to BFU, a state that resists forensic unlocking tools commonly used in law enforcement.<\/p>\n Cryptography expert Matthew Green from Johns Hopkins University explained that while this feature may hinder some law enforcement procedures, its primary purpose is likely to prevent data theft from lost or stolen iPhones. \u201cThe real threat here is not police. It\u2019s the kind of people who will steal your iPhone for malign purposes,\u201d<\/em> Green told 404 Media. He argues that this reboot feature adds a layer of protection, making it harder for bad actors to access stored data.<\/p>\n Although Apple has not publicly commented on the feature, sources such as 9to5Mac indicate that technical details of the \u201cInactivity Reboot\u201d feature are available in iOS 18.1\u2019s open-source code on GitHub<\/a>. This change represents another instance of Apple prioritizing user privacy, even as it creates friction with law enforcement interests.<\/p>\n Mac users are once again in the crosshairs of North Korean hackers, as the cybercriminal group BlueNoroff has launched a sophisticated phishing and malware campaign targeting those involved in cryptocurrency and decentralized finance (DeFi). According to a report from SecurityWeek<\/a>, BlueNoroff is using phishing emails with fake crypto-related headlines to deliver malware to macOS devices, bypassing Apple\u2019s security measures through a signed and notarized Apple Developer ID, which has since been revoked.<\/p>\n The campaign works in two stages. First, the attackers send an email containing a link to a seemingly innocent PDF file related to cryptocurrency, which is actually a macOS application embedded with malware. Written in Swift, the app is designed to appear legitimate, even opening a decoy PDF from Google Drive to avoid raising suspicion. Meanwhile, the malware is downloading a malicious binary from a hard-coded URL in the background.<\/p>\n The second stage of the attack is more selective. As reported by SentinelOne<\/a>, this stage targets only specific Macs: it operates on Intel-based machines and on Apple Silicon devices with Rosetta emulation enabled. Once executed, the malware establishes communication with a command-and-control (C2) server, sending information about the system\u2019s OS version, hardware, and running processes.<\/p>\n Security experts, including those from SecureMac, emphasize the importance of caution when dealing with unexpected emails, particularly those from unknown sources. \u201cStop clicking on unexpected links from random senders,\u201d<\/em> they urge users, as phishing emails remain a common initial entry point for these attacks.<\/p>\n Password security has hit a new low in 2024, with the most common passwords globally revealing an unsettling lack of security awareness among users. According to the annual report from password manager NordPass<\/a>, in collaboration with NordStellar, \u201c123456<\/strong>\u201d remains the world\u2019s most popular password, used by over 3 million personal accounts and 1.2 million corporate accounts worldwide. This same weak password has topped the list in five of the past six years.<\/p>\n The global list of most common passwords in personal accounts also includes \u201c123456789<\/strong>,\u201d \u201c12345678<\/strong>,\u201d \u201cpassword<\/strong>,\u201d and \u201cqwerty123<\/strong>.\u201d Meanwhile, in the United States, \u201csecret<\/strong>\u201d ranks as the top password for personal use. The report on corporate accounts doesn\u2019t offer much relief: \u201c123456<\/strong>\u201d is once again the top choice, followed by similar weak options like \u201c123456789<\/strong>,\u201d \u201c12345678<\/strong>,\u201d \u201csecret<\/strong>,\u201d and \u201cpassword<\/strong>.\u201d<\/p>\n CNET<\/a> advises users to adopt longer, unique passwords that avoid easily guessed information like birthdays and common words. To help users manage complex passwords, password managers are recommended, as they can generate strong, unique passwords and eliminate the need to memorize them. Many of these tools are available for free, including Apple\u2019s built-in Passwords app on iOS 18, iPadOS 18, and macOS Sequoia 15, which offers secure storage and management without extra cost.<\/p>\n For more on creating and managing strong passwords, see Checklist 399 on last week\u2019s show, \u201cPasswords with Allison Sheridan<\/a>.\u201d<\/p>\nNorth Korean Hacking Group Targets Mac Users with New Malware Campaign<\/h2>\n
\u201c123456\u201d Tops Worst Password List Again in 2024 as Security Experts Urge Better Practices<\/h2>\n