Steve Ragan, reporting for CSOOnline: Since February, a number of Apple users have reported locked devices displaying ransom demands written in Russian. Earlier this week, a security professional posted a message to a private email group requesting information related a possible compromise of at least 40 million iCloud accounts. Salted Hash started digging around on this story after the email came to our attention. In it, a list member questioned the others about a rumor concerning “rumblings of a massive (40 million) data breach at Apple.” The message goes on to state that the alleged breach was conducted by a Russian actor, and vector “seems to be via iCloud to the ‘locate device’ feature, and is then locking the device and asking for money.”In a separate report, the publication reports that three websites owned by Penton Technology — MacForums.com, HotScripts.com, and WebHostingTalk.com — have been compromised and their databases are now being sold on the Darknet. While nothing is confirmed, there is a possibility that some of the rumored 40M compromised Apple ID credentials may have come from these forums, or from LinkedIn’s recent hack.
Read more of this story at Slashdot.