Earlier this week, researchers at the Technical University of Darmstadt published a post discussing the AirDrop vulnerability. It relates to the fact that the technology uses a mutual authentication mechanism to compare the user’s phone number and email with the device’s contact records before exchanging data.
Researchers have found that attackers can obtain this data using a Wi-Fi-enabled device and being close to the target.
The experts noted that they first drew attention to this problem back in 2019 and immediately reported this to Apple. But the company has yet to take any action to address the vulnerability. For users fearing data leaks, researchers advise turning off AirDrop completely.