Apples Find My network can be tricked to track any Bluetooth device

Hackers have found a way to exploit Apple’s Find My network by manipulating Bluetooth signals to turn virtually any device into a trackable AirTag. While the Find My network is a valuable tool for locating lost iPhones, misplaced luggage, or even stolen vehicles equipped with AirTags, security researchers have discovered a method to bypass its protections.

A research team from George Mason University, including associate professors Qiang Zeng and Lannan Luo, along with PhD students Chen and Xiaoyue Ma, developed an attack called “nRootTag.” This exploit manipulates Bluetooth addresses to deceive the Find My network into recognizing a non-Apple device as a missing AirTag.

AirTags work by transmitting Bluetooth signals, which are picked up by nearby iPhones and Apple devices. These signals are then relayed through the Find My network to Apple’s servers, allowing the owner to track the device anonymously. In their experiments, the researchers successfully made non-Apple hardware behave like an AirTag, making it trackable on the network.