Categories
technical

iCloud face man-in-the-middle attack in China

Yesterday, I was posted an article to report iCloud got Man-in-the-middle attack in China,
http://www.zhoushuguang.com/2014/10/icloud-ssl-attack.html
and repost to two major Chinese geek community,
http://www.freebuf.com/news/47744.html
http://www.solidot.org/story?sid=41521

Chinese attacker is running a Man-in-the-middle attack on SSL encrypted traffic between iCloud server and China Unicom users. The ISP (probably asked by the government to do so) replaced the certificate of iCloud with a self-issued one. The government conducted similar attacks against GitHubGoogleWindows Live and Yahoo.