An alleged mass iCloud hack has seen a veritable who’s who of Hollywood nude selfies leaked onto the Internet.
The photos — which include the likes of Avril Lavigne, Hayden Pannettiere, Kate Upton, Mary Elizabeth Winstead and Rihanna — appeared first on 4Chan, with an anonymous poster telling people he/she had obtained the photos by hacking iCloud accounts. In addition, the photos were being sold for Bitcoins, which most likely makes this a first.
Several of the celebrities in question have confirmed the authenticity of the images. Mary Elizabeth Winstead wrote that, “To those of you looking at photos I took with my husband years ago in the privacy of our home, hope you feel great about yourselves.”
To those of you looking at photos I took with my husband years ago in the privacy of our home, hope you feel great about yourselves.
— Mary E. Winstead (@M_E_Winstead) August 31, 2014
She additionally claims that she had deleted these photos, which would seem to confirm the claims that accounts have been compromised.
Apple has yet to make a statement about the breach, but a Python script which appeared on Github Monday may explain explain how the hackers were able to exploit a vulnerability in the Find my iPhone service — whereby attackers can guess passwords repeatedly without being locked out — to access user accounts.