Simple Exploit to Steal Apple Passwords

There are a lot of fingers pointed at Google and their Android devices because of security issues that have affected their handsets. Often we look at one company and give the other guys a free pass as it were. The truth is Apple has a major security issue on their iOS devices that has been around for a while. The issue exhibits as a "legitimate" sign in prompt to iTunes that actually doesn't come from iTunes at all. This gives a person your account credentials and full access to anything you have in there. It's kind of a big deal - and it's been around for a while.

iOS asks the user for their iTunes password for many reasons, the most common ones are recently installed iOS operating system updates, or iOS apps that are stuck during installation. As a result, users are trained to just enter their Apple ID password whenever iOS prompts you to do so. However, those popups are not only shown on the lock screen, and the home screen, but also inside random apps, e.g. when they want to access iCloud, GameCenter or In-App-Purchases.

Source: KrauseFX