Apple implements countermeasures against ``attack that crashes iPhone by repeatedly requesting Bluetooth connection with commercially available wireless devices'' in iOS 17.2



The wireless device '

Flipper Zero ' is a convenient device that supports a variety of wireless standards, but it is also known to be capable of attacks such as ' crashing the iPhone by continuously requesting Bluetooth connection .' It has been newly revealed that Apple has implemented crash prevention measures in iOS 17.2 released on December 2, 2023.

iOS 17.2 update puts an end to Flipper Zero's iPhone shenanigans | ZDNET
https://www.zdnet.com/article/ios-17-2-update-puts-an-end-to-flipper-zero-iphone-shenanigans/

The jig is up: Flipper Zero can no longer crash iPhones running iOS 17.2 - 9to5Mac
https://9to5mac.com/2023/12/15/the-jig-is-up-flipper-zero-devices-can-no-longer-crash-iphones-running-ios-17-2/

Flipper Zero is a device equipped with various wireless controllers such as Bluetooth, infrared communication, and NFC, and can be used for purposes such as ``using it as a remote control for home appliances'' and ``creating a duplicate card key.'' You can find out what kind of device Flipper Zero is by reading the article below.

``Flipper Zero'' remote control device that supports a wide range of frequency bands, NFC, Bluetooth, and infrared rays - GIGAZINE



Flipper Zero is a very useful device, but because it has too many functions, it can also be used for harmful purposes such as `` destroying electricity meters ''. For this reason, the products were sometimes viewed as problematic by the authorities, and were confiscated by the Brazilian authorities and sold on Amazon .

Meanwhile, in October 2023, an attack was confirmed in which ``Flipper Zero continuously sends Bluetooth connection requests to surrounding iPhones and crashes the iPhone.'' The only defense against this attack was to disable Bluetooth on the iPhone, and Apple was required to take action.

An attack that makes the iPhone unusable is discovered with the high-performance wireless operation device ``Flipper Zero'' banned by Amazon, the only defense method is to turn off Bluetooth - GIGAZINE



It has been newly revealed that iOS 17.2, released by Apple on December 2, 2023, has been implemented to deal with attacks by Flipper Zero. Before the countermeasures were taken, when an iPhone was attacked by Flipper Zero, a phenomenon occurred in which ``pop-ups requesting Bluetooth connection were displayed one after another, and the device eventually restarted'', but foreign media ZDNET reported that iOS 17.2 As a result of trying a similar attack on an iPhone installed with , only a few pop-ups requesting a Bluetooth connection were displayed, but there was no crash.



In addition, overseas media 9to5Mac conducted a similar experiment and confirmed that iPhones with iOS 17.2 installed do not crash.



in Software,   Security, Posted by log1o_hf