If any of these are your iCloud passwords, you should be worried

If you are using Apple’s iCloud for storing your data online and other stuff, then you need to take this alert seriously, and with a dash of salt. Apple’s iCloud can be hacked with a new tool, which has been shared online amongst the hacking underworld.

Gizmodo and The Hacker News reported that a password-hacking tool called iDict has just been uploaded to GitHub, which promises to use the old-fashioned brute force technique to crack through Apple’s iCloud accounts.

The report reveals a list of almost 500 easily hackable passwords can be used to get past the account security with great ease. The tool can also easily get past Apple’s rate-limiting and two-factor authentication security that is supposed to prevent brute force attacks.

However, though the news is disheartening, it is not as bad as it sounds. The tool’s capabilities are only restricted to the size of the dictionary (it uses) to guess the password. Therefore, if your password matches one of those in the list of 500 given passwords below, then you should act immediately and change it to a more difficult combination.

The list of the given 500 passwords fulfils the requirements of Apple’s iCloud password. So if you are using one of these or even if not, we would suggest that you change it immediately.

The list reveals that the password used are commonly entered by users world-wide, which make is stupidly simple for the hacker to get past the security.

Gizmodo also stated that the developer of the iDict tool is not just a hacker with a toy, but wants to actually highlight the fact that even after the recent nude photo hack scam, iCloud is still not as secure as it should be. It means that the online service is still vulnerable to simple brute force hacks.

The developer, @Pr0x13, states that Apple needs to fix the "painfully obvious" bug before it's "privately used for malicious or nefarious activities". iDict is a ‘A 100% Working iCloud Apple ID Dictionary attack that bypasses Account Lockout restrictions and Secondary Authentication on any account.’

If your password is in the list of 500 commonly used password list below, change it immediately: