Hackers create tool to bypass Apple’s ‘Activation Lock’ security feature

Two hackers have created a tool that they claim can bypass Apple’s ‘Activation Lock.’ It’s called ‘doulCi, and it uses a man-in-the-middle attack to intercept users’ Apple ID credentials as well as unlock devices disabled by the highly-lauded security feature.
The hack utilizes a vulnerability in iTunes for Windows that has to do with verifying security certificates. And apparently, all you have to do to get it to work is plug in the device to a computer, and alter a file, directing it to an alternate server instead of iCloud…
According to security researcher Mark Loman, the bug in the Windows version of iTunes was either a beginner’s mistake, or was left in intentionally to allow intelligence agencies to access iCloud. Apple recently fixed a similar vulnerability in OS X and iOS.
Here’s how AquaXetine and MerrukTechnolog, aka Team doulCi (iCloud backwards), describe the attack:

doulCi is the worlds first Alternative iCloud Server, and the world’s first iCloud Activation Bypass. doulCi will bypass and activate you iDevice for you when you are stuck at the Apple activation menu. So, why would you use it? For example, if you have forgotten your Apple ID and password or no longer have access to your old itunes-email account then its impossible to regain control of your Apple Product!! doulCi is the solution that will enable you to can regain permenant access.

We haven’t seen video proof of the attack in action, but the hackers have demonstrated its efficiency by sharing screenshots of ‘calls to Apple’s iCloud activation service.’ A number of other users are also sharing screenshots, showing the hack worked for them.