However due to the fact that the vulnerability was allowed to remain open for a brief period of time, there is a chance that the tool could have been used, so like we said if you tend to favor easy passwords, perhaps it is time that you start changing it to something a little tougher for hackers to figure out. Now the other piece of good news is that it appears that Apple has since patched the vulnerability on their end that allowed the tool to re-enter passwords as many times without getting locked out. On iDict’s GitHub page, user Pr0x13 says that the exploit used to create the hacking tool is painfully obvious, saying that it was only a matter of time before. The tool, iDict, uses an exploit in Apple’s security to bypass restrictions that stop most hackers from gaining access to accounts. The good news is that if you used a hard to guess password and something completely unique, iDict should not work as it basically relies on a 500-long word list of basic passwords in order to make its guesses. A hacker has released a tool that he claims can break into any iCloud account. The tool can apparently guess your iCloud password through sheer brute force and can also apparently bypass Apple’s two-factor authentication.

Considering that English alone has nearly a million words in it (when. Well the bad news is that if you have chosen these easily guessed passwords, there are reports of a tool that has been uploaded to GitHub called iDict. A password-hacking tool has been uploaded to allow attackers to break into any iCloud account. As quickly as news got out that iDICT was able to hack iCloud accounts, Apple adjusted its anti-bruce force timers to neutralize this hacking tool, which wasn’t that much of a threat to begin with because it simply tried each of the 500 words in its microscopically small dictionary to see if any could get them in. Developed by a user who uses the online alias Pr0x13, the tool was described as. iDict is a ‘A 100% Working iCloud Apple ID Dictionary attack that bypasses Account Lockout restrictions and Secondary Authentication on any account.Despite there being multiple warnings in the past about how one shouldn’t use easy to guess passwords like “password” or “12345678” or “abc123”, there are still users out there who choose to do so, thinking that the chances of them getting hacked are quite low. The problem came to light after a proof-of-concept attack tool called iDict was released on GitHub in early January. The developer, states that Apple needs to fix the 'painfully obvious' bug before it's 'privately used for malicious or nefarious activities'.

Idict tool