Thursday, March 28, 2024

Worried about Apple AirTag? How to Check if you’re being tracked

With the uprise in AirTag tracking, without consent, here is some useful advice for people that are worried about Apple’s Trackers.

When the AirTag launched in 2021, Apple’s Bluetooth tracker with ultra-wideband was lauded as a step toward the future of augmented reality and a great way to find everyday objects, like your lost TV remote. Cybersecurity experts expressed concern that the tracking device would be exploited by stalkers. As we get closer to AirTag’s one-year anniversary, those warnings appear prescient.

Model Brooks Nader says an AirTag was secretly slipped into her coat during a night out in New York City. In Connecticut, a man was arrested and charged with stalking after police found an AirTag in the victim’s car. Police in multiple states have issued warnings about the potential criminal uses of AirTags.

Newer AirPods have tracking abilities similar to AirTags, but the higher cost of Apple’s earbuds limits their disposability as a tracking device. On February 10, Apple updated its support page for AirTags with additional information and a firm denouncement of using the device to track people. Reporting from 9to5Mac suggests further AirTag updates will be rolled out this year.

Even though Tile and other competitors to the AirTag exist, the vastness of Apple’s ecosystem sets the device apart. If you are concerned that a secret AirTag may be recording your location, these signs may help detect the tracker.

Signs an AirTag Is Tracking You

The type of smartphone you own affects how easily you can discover hidden AirTags. Owners of iPhones running iOS 14.5 or newer should receive a push alert whenever an unknown AirTag is nearby for an extended period of time and away from its owner. Apple’s website does not provide an exact time frame for when this alert is triggered.

Recommended:  Apple Releases Updates to Patch Actively Exploited Zero-Day Flaw in iOS, iPadOS, macOS

When you click on the iPhone alert, you may be given the option to play a sound on the AirTag to help locate the device. Check that you will receive these alerts by going into the Find My app, choose the Me tab in the bottom-right corner, and make sure Item Safety Alerts is green and toggled to the right under Notifications.

Months after the release of the AirTag, Apple launched the Tracker Detect app for Android phones. Unlike the security features available for the iPhone, the Android app does not automatically look for unknown AirTags.

Users must initiate the scan.

According to Eva Galperin, director of cybersecurity at the Electronic Frontier Foundation, the reason for the app’s limited functionality is complicated. “This is actually a limitation of how the Android ecosystem works and how Android apps can work,” she says. “I have called on Apple and Android to work together to incorporate the level of mitigations that Apple provides in iOS into the Android operating system, but this requires a lot of cooperation between two groups who are normally rivals.”

While some guides to finding AirTags recommend using Bluetooth scanners, Galperin does not consider this method to be reliable for tracker searching. “I have tried using various Bluetooth scanners in order to detect AirTags, and they do not work all the time,” she says.

Millions of Americans still do not own a smartphone. Without a device on hand, you must rely on visual and audible clues to find any hidden AirTags. The circular white disc is slightly larger than a quarter. As reported by The New York Times, Ashley Estrada discovered an AirTag lodged under her license plate, and her video documenting the incident was viewed over 20 million times on TikTok.

Recommended:  MACOS: 20 Common Tools Techniques Used by Threat Actors & Malware

When the AirTag was first released, the tracker would emit a beeping noise if away from the owner for longer than three days. Apple has since shortened the time to 24 hours or less. Despite the update, you might not want to rely only on sound to detect AirTags. Numerous videos on YouTube offer DIY instructions to disable the speaker, and noiseless versions of the trackers were even listed for a short time on Etsy.

What if I Find One?

The best way to disable an AirTag is to remove the battery. To do this, flip the AirTag so the metallic side with an Apple logo is facing you. Press down on the logo and turn counterclockwise. Now you will be able to remove the cover and pop out that battery.

Apple’s support page for the AirTag suggests reaching out to the police if you believe you are in a dangerous situation. “If you feel your safety is at risk, contact your local law enforcement, who can work with Apple to request information related to the item. You might need to provide the AirTag, AirPods, Find My network accessory, and the device’s serial number.”

One way to figure out the serial number is to hold the top of an iPhone or other near-field-communication-enabled smartphone to the white side of an AirTag. A website with the serial number will pop up. If you feel hesitant about scanning the AirTag or do not have the ability, a serial number is printed on the device beneath the battery.

Who Does This Affect?

In the viral stories shared online and in police reports, women are often the victims of AirTag stalking, but Galperin cautions against framing unwanted tracking as solely an issue for women. “I have been working with victims of tech-enabled abuse for many years,” she says, “and I would say that about two-thirds of the survivors that come to me are women. But a third of them are men. I suspect that number would be higher if there wasn’t such a stigma around being an abuse victim or survivor.”

Recommended:  InfoSec - A Newbie Guide - InfoSecurity

She emphasized how men, women, and nonbinary people can all be victims of abuse, as well as perpetrators. “When we paint it all with this really broad brush, we make it really hard for victims who don’t fit that mold to come forward,” says Galperin.

You may also enjoy reading, The largest DDoS to date, Microsoft mitigates a 3.47 Tbps DDoS attack

Got to Cybersecurity News

Go to Homepage

Go to Cybersecurity Academy

Stay informed of the latest Cybersecurity trends, threats and developments. Sign up for RiSec Weekly Cybersecurity Newsletter Today

Remember, CyberSecurity Starts With You!

  • Globally, 30,000 websites are hacked daily.
  • 64% of companies worldwide have experienced at least one form of a cyber attack.
  • There were 20M breached records in March 2021.
  • In 2020, ransomware cases grew by 150%.
  • Email is responsible for around 94% of all malware.
  • Every 39 seconds, there is a new attack somewhere on the web.
  • An average of around 24,000 malicious mobile apps are blocked daily on the internet.
Bookmark
ClosePlease login
Share the word, let's increase Cybersecurity Awareness as we know it
- Sponsored -

Sponsored Offer

Unleash the Power of the Cloud: Grab $200 Credit for 60 Days on DigitalOcean!

Digital ocean free 200

Discover more infosec

User Avatar
Steven Black (n0tst3)
Hello! I'm Steve, an independent security researcher, and analyst from Scotland, UK. I've had an avid interest in Computers, Technology and Security since my early teens. 20 years on, and, it's a whole lot more complicated... I've assisted Governments, Individuals and Organizations throughout the world. Including; US DOJ, NHS UK, GOV UK. I'll often reblog infosec-related articles that I find interesting. On the RiSec website, You'll also find a variety of write-ups, tutorials and much more!

more infosec reads

Subscribe for weekly updates

explore

more

security