215
Apple 'Find My' network can be abused to steal keylogged passwords
(www.bleepingcomputer.com)
This is a most excellent place for technology news and articles.
I think the main concern is how easy and ubiquitous it is, while also being pretty hard to detect. No other transmission method lends itself so perfectly to this kind of attack.
And I wouldn't say it's that unlikely. Every publicly accessible keyboard could be targeted, like in schools or universities. Buy an identical model to those that are used in the computer room, modify it, switch it out, and wait for people to enter their emails and passwords.
Not with Apple's network anymore apparently. But if you read the original PoC from 2021 they said Amazon's Echo devices have the same potential.
Ultimately, even the researchers have indicated the slow and unreliable nature of the attack (which now no longer works).
I just watched a video by a German tech magazine the other day, with Fabian Bräunlein (the original researcher) demonstrating a keylogger using the Find My network. It's only 3 days old, so I don't think the main problem is fixed at all.