iOS 5 users, beware a security flaw in Safari that can be used to trick you into visiting potentially malicious Web sites.
Discovered earlier this month by Germany security firm MajorSecurity, the vulnerability could allow cybercriminals to spoof the URL displayed in the browser, trapping users at the wrong sites.
First uncovered in IOS 5.0, the hole was reproduced in iOS 5.1. The security firm was able to confirm the flaw on an iPhone 4, iPhone 4S, iPad 2, and "iPad 3," all running iOS 5.1.
Apple was informed of the bug by MajorSecurity on March 3, but the information didn't go public until this past Tuesday. Apple did not immediately answer CNET's request for comment. But MajorSecurity is advising users to upgrade to a new version of IOS when a patch becomes available.
Since Apple has acknowledged the issue, it should be able to push out a fix in its next iOS update, says The Next Web. For now, though, mobile Safari users should follow the usual advice of not opening links you don't trust and be on the lookout for any site that asks for personal information.
Curious iOS 5 users can reproduce the bug themselves via the following steps outlined by MajorSecurity:
- Visit http://majorsecurity.net/html5/ios51-demo.html on your mobile device.
- Click the Demo button in the upper left.
- A new page will open displaying the URL for Apple's Web site with all the expected content. So you believe you're on Apple's site. But the page is actually still being hosted at MajorSecurity's domain.
Apple - USE TAG
reading•Safari bug could lure iOS 5 users to malicious Web sites
Nov 14•Black Friday iPhone deals 2018: $150 off iPhone XR and XS, $400 iPhone X gift card
Nov 14•T-Mobile's early Black Friday deal includes free iPhones, LG and Samsung Galaxy phones
Nov 14•Black Friday 2018 smartwatch and fitness tracker deals: $80 off Apple Watch, $70 off Galaxy Watch, $50 off Fitbit Versa
Nov 14•Apple's Safari tests 'not secure' warning for unencrypted websites