FBI paid hackers to crack terrorist's iPhone

Washington -
The FBI paid professional hackers to unlock an iPhone owned by one of the San Bernardino terrorists, it has emerged.

FBI paid hackers to crack terrorist's iPhone

Credit: AFP

A man walks up the stairs at the Apple Store in Grand Central Station February 25, 2016. Picture: AFP/ Timothy A Clary

The Washington Post revealed that hackers discovered a security flaw in the device, which they shared with the FBI in return for a “one-time flat fee”.

The agency could then crack the phone's four-digit passcode, crucially, without triggering its data-wiping security feature.

The phone belonged to Syed Farook, who, with his wife, Tashfeen Malik, shot and killed 14 people in an attack on an office Christmas gathering in San Bernardino, California in December last year.

They were later killed in a shootout with police.

Apple resisted a February court order compelling the company to write new software to unlock the device.

But the FBI abandoned the case last month, saying it had “successfully accessed the data” stored on the phone with the assistance of a third party.

At the time it was reported that the third party in question may have been the Israeli cybersecurity firm Cellebrite, but sources told the Post that was not the case.

At least one of the people who brought the security flaw to the FBI was a “grey hat” hacker, the newspaper reported, meaning people who search for software vulnerabilities and sell the information to government agencies to use, for example in surveillance.

So-called “white hat” hackers report such flaws to firms like Apple so that they can be fixed, while “black hat” hackers exploit such flaws for their own use.

“Grey hat” hackers are seen as occupying an ethical grey area between the two.

The US government has yet to decide whether it will share the device's vulnerability with Apple, which has said it will not sue to learn it.

FBI director James Comey has said that the solution used to unlock Farook's phone would only work on iPhone 5cs running on iOS 9, meaning it would be ineffective for cracking more recent models or operating systems.

The Independent