Security Architecture, Endpoint/Device Security, Endpoint/Device Security, Security Strategy, Plan, Budget, Vulnerability Management, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

Malicious ‘ChaiOS’ link can crash Apple devices

A quirky bug in Apple's Messages application is allowing a malicious GitHub link to cause crashes and other bothersome behavior on both macOS and iOS machines.

Various news sources have credited Twitter user Abraham Masri, aka @cheesecakeufo, with publicly disclosing the bug, referred to as ChaiOS. "Text the link below, it will freeze the recipient's device, and possibly restart it," reads a Jan. 17 tweet from Masri.

After testing the link, 9to5Mac reported that it can make the Messaging app freeze and crash, cause Safari to crash or display the spinning wheel on macOS, force both the sender and recipient's device to respring, cause significant lags, and trigger battery issues.

Masri and news reports have likened ChaiOS to a 2015 attack called "Effective Power," that involved a sequence of texted characters that caused iPhones to reboot.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.