Feds arrested hackers involved in the Fappening Hack Investigation

The FBI raided another the second home in Chicago to arrest the second alleged culprit in the Fappening hack Investigation.

In 2014 an unknown hacker leaked online nude pictures of celebrities, including the popular and Kate Upton. We are speaking about the case known as The Fappening, the hacker took over a large number of Apple iCloud accounts, including those belonging to the US celebrities.

News in the headline it the capture of the alleged culprit, a new court documents reveal the name of the suspect identified by the FBI, he is the hacker Ed Majerczyk.

Last year, Gawker reported that the FBI had raided the Chicago home of Emilio Herrera, it was suspected of hacking thousands of private iCloud accounts, including the ones cited in the The Fappening saga.

“Herrera’s alleged iCloud cracking went way beyond that narrow list of celebs: between May 31, 2013, and August 31, 2014, his IP address “was used to access approximately 572 unique iCloud accounts,” and “in total, the unique iCloud accounts were accessed 3,263 times.”” states Gawker.

According to the documents obtained by Gawker, there is also another suspect in the security breaches, last October, the agents of the FBI raided the Ed Majerczyk’s home in Chicago, as reported in the following document.

The authorities are charging the man with unauthorized access to the iCloud accounts. The man seems to have accessed the accounts for his home in Chicago, according to the FBI, Majerczyk violated 330 unique iCloud accounts a total of over 600 times in 2014. The hacker accessed the victim’s image gallery and uploaded it on 4chan.

According to court documents obtained by Gawker, The law enforcement has found some sexual photos subtracted to Jennifer Lawrence.

“In October of 2014, the FBI fingered Ed Majerczyk, another Chicago man with a similar laundry list of cloud-based invasions. Among his alleged social engineering exploits were sexual photos lifted from Jennifer Lawrence, who quickly became the face of  The Fappening:”

The court documents [PDF] states Majerczyk gained access to iCloud accounts by posing himself as an “Apple Technical Assistant” employee, with this social engineering trick he stole nude photos of celebrities.

“The FBI says Majerczyk, through a series of bogus email accounts like “appleprivacysecurity@gmail.com,” created a phishing dragnet that duped very famous victims into providing him with their passwords through some pretty elementary tricks:”Gawker reported.

The hack of the account was a joke for the hacker, for example in the case of Jennifer Lawrence, the celebrity lost access to her iCloud account and then received a fake support email from appleprivacysecurity@gmail.com.

“Your Apple ID was used to login into iCloud from an unrecognized device on Wednesday, August 20th, 2014. Operating System: iOS 5.4 Location: Moscow, Russia (IP=95.108.142.138) If this was you please disregard this message. If this wasn’t you for your protection, we recommend you change your password immediately. In order to make sure it is you changing the password, we have given you a one-time passcode, 0184737, to use when resetting your password at http://applesecurity.serveuser.com/. We apologize for the inconvenience and any concerns about your privacy. Apple Privacy Protection.” is the fake phishing message sent to Jennifer Lawrence.

 

The court documents reveal that Majerczyk run a phishing campaign relying on deceptive web domains and fake security warnings.

The investigation is still ongoing, stay tuned!

Pierluigi Paganini

(Security Affairs – Fappening, celebrity nude photos leak)

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Paraguay Suffered Data Breach: 7.4 Million Citizen Records Leaked on Dark Web

Resecurity researchers found 7.4 million records containing personally identifiable information (PII) of Paraguay citizens on…

15 minutes ago

Apple confirmed that Messages app flaw was actively exploited in the wild<gwmw style="display: none; background-color: transparent;"></gwmw>

Apple confirmed that a security flaw in its Messages app was actively exploited in the…

8 hours ago

Trend Micro fixes critical bugs in Apex Central and TMEE PolicyServer

Trend Micro fixed multiple vulnerabilities that impact its Apex Central and Endpoint Encryption (TMEE) PolicyServer…

11 hours ago

Paragon Graphite Spyware used a zero-day exploit to hack at least two journalists’ iPhones<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

Security researchers at Citizen Lab revealed that Paragon's Graphite spyware can hack fully updated iPhones…

22 hours ago

SinoTrack GPS device flaws allow remote vehicle control and location tracking

Two vulnerabilities in SinoTrack GPS devices can allow remote vehicle control and location tracking by…

1 day ago

U.S. CISA adds Wazuh, and WebDAV flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Wazuh, and WebDAV flaws to its Known…

1 day ago