iOS 5 users, beware a security flaw in Safari that can be used to trick you into visiting potentially malicious Web sites.
Discovered earlier this month by Germany security firm MajorSecurity, the vulnerability could allow cybercriminals to spoof the URL displayed in the browser, trapping users at the wrong sites.
First uncovered in IOS 5.0, the hole was reproduced in iOS 5.1. The security firm was able to confirm the flaw on an iPhone 4, iPhone 4S, iPad 2, and "iPad 3," all running iOS 5.1.
Apple was informed of the bug by MajorSecurity on March 3, but the information didn't go public until this past Tuesday. Apple did not immediately answer CNET's request for comment. But MajorSecurity is advising users to upgrade to a new version of IOS when a patch becomes available.
Since Apple has acknowledged the issue, it should be able to push out a fix in its next iOS update, says The Next Web. For now, though, mobile Safari users should follow the usual advice of not opening links you don't trust and be on the lookout for any site that asks for personal information.
Curious iOS 5 users can reproduce the bug themselves via the following steps outlined by MajorSecurity:
- Visit http://majorsecurity.net/html5/ios51-demo.html on your mobile device.
- Click the Demo button in the upper left.
- A new page will open displaying the URL for Apple's Web site with all the expected content. So you believe you're on Apple's site. But the page is actually still being hosted at MajorSecurity's domain.
reading•Safari bug could lure iOS 5 users to malicious Web sites
Jan 17•MacBook Air. Apple’s best product ever
Jan 16•Apple gets 'The Office' actors to make its FileMaker exciting
Jan 16•iPhone 7 Plus was almost China's top-selling phone in 2017
Jan 13•Apple puts the pressure on your selfies in new iPhone X ad