Cracked Copies of MSAB’s XRY Pro Phone-Extraction Tool Reportedly Offered for $10
Summary
MSAB says older XRY Pro copies were illegally copied after a cyberattack at an unnamed customer. Sellers reportedly offer builds for $10; whether the copies work is unconfirmed. The article outlines risks and phone-protection steps.
Key points
- MSAB says a third party bypassed its licensing system and copied older software after a cyberattack at an unnamed customer’s premises; MSAB says its own security procedures were not compromised.
- Affärsvärlden reported $10 offers based on a seller screenshot, and MSAB’s CFO confirmed cracked versions were being sold through Telegram.
- Listings name XRY Pro builds 11.5.5 and 11.5.6. Whether the copies function as advertised is unconfirmed.
- XRY Pro is a Windows phone-extraction tool; MSAB says it can bypass passwords on AFU devices and brute-force BFU devices.
- The article says the tool requires physical access to a phone connected to a computer, rather than enabling remote hacking.
- Recommended precautions include installing phone updates, using a long alphanumeric passcode, and restarting or switching off a phone when it may be taken out of the owner’s control.
Article Details
- Event Type
- Unauthorized sale and online circulation of cracked copies of XRY Pro after a cyberattack at an MSAB customer bypassed the software’s licensing system.
- Impact
- MSAB says copies of older XRY Pro builds 11.5.5 and 11.5.6 are being sold, including through Telegram, and that its own security procedures and proprietary technology were not compromised. The customer was not named, and whether the copies work as sellers claim is unconfirmed. Wider access to the phone-extraction software could expose phone owners to attempts to unlock or extract data from devices an operator physically possesses. MSAB says the incident has no commercial impact and that phone-maker updates will render the copies obsolete within a few months; it says no exploitation technique has been revealed.