Azimuth Security Cracks Iphone using Condor
Azimuth develops high-end hacking tools for governments. Azimuth sits in the high-end tier of the exploit industry. Whereas other companies which develop hacking tools may sell them to as many governments as possible, Azimuth and other small shops typically provide them to democratic governments. The U.S. government has tried to find legal and technical mechanisms to circumvent the encryption offered on popular consumer devices, including those made by Apple.
Founder Mark Dowd, 41, is an Australian coder one colleague said, “can pretty much look at a computer and break into it.” One of his researchers was David Wang, who first set hands on a keyboard at age 8, dropped out of Yale, and by 27 had won a prestigious Pwnie Award — an Oscar for hackers — for “jailbreaking” or removing the software restrictions of an iPhone.
The got around iOS feature that erased the device after 10 incorrect passcode attempts with an a exploit chain that started with a Mozilla/Lightning port vulnerability.
Azimuth specialized in finding significant vulnerabilities. Dowd, a former IBM X-Force researcher whom one peer called “the Mozart of exploit design,” had found one in open-source code from Mozilla that Apple used to permit accessories to be plugged into an iPhone’s lightning port, according to the person.
David Wang was able to find and use two more exploits to work with the original one that Dowd had found “giving him full control over the phone’s core processor.” 30-year-old Wang, who specialized in exploits on iOS.
He wrote software that rapidly tried all combinations of the passcode, bypassing other features, such as the one that erased data after 10 incorrect tries.
Wang and Dowd tested the solution on about a dozen iPhone 5Cs, including some bought on eBay, the people said. It worked. Wang dubbed the exploit chain “Condor.”
Apple questioned Wang about the morality of selling exploits to governments, according to court records.
<https://www.washingtonpost.com/technology/2021/04/14/azimuth-san-bernardino-apple-iphone-fbi/>