This Apple Mail Flaw Could Expose Your iCloud Password

A flaw in Apple Mail in iOS 8.3 could be exploited to trick users into giving away their iCloud passwords, according to a researcher.

Jan Soucek published tools that he said could exploit the bug, as he claimed he already warned Apple about it.

"Back in January 2015 I stumbled upon a bug in iOS's mail client... but the fix was not delivered in any of the iOS updates following 8.1.2," he said.

Here's the video of the demo of the bug:

Another report from PC World said the roof-of-concept code showed an attacker can send an email to someone with HTML code that resembles the iCloud login pop-up window. However, Apple has put security measures like two-factor authentication, that should be good enough to combat such phishing attacks.