Preventing iPhone Theft: Strengthening Security Measures
TLDR; Thief explains exploiting iPhone vulnerabilities to steal, access accounts, and sell stolen devices, urging stronger security measures.
⚠️ Exploiting Apple's Software Vulnerability
The thief, Aaron Johnson, exploited a vulnerability in Apple's software to steal hundreds of iPhones and exploit their users' accounts.
He targeted people in and around bars to steal their phones and passcodes, using the stolen phones to access bank accounts and money apps, locking victims out of their Apple accounts.
Apple created new security software, but loopholes remain, allowing thieves to exploit the stolen device's passcode.
🔓 Getting the Phone and Passcode
Johnson initially pickpocketed phones and later tricked victims into giving him their phone and passcode by offering drugs or pretending to be a rapper.
He targeted young, intoxicated individuals and would ask for the phone's passcode, often distracting them to observe or obtain the code.
Johnson also admitted to videotaping passcodes and working with others in this criminal activity.
💻 Getting into Apple Account
Johnson quickly changed the victim's Apple ID password using the stolen passcode, locking them out of the phone and gaining access to bank apps and accounts.
He enrolled his own face for Face ID, accessing sensitive information and draining victims' bank accounts while they were sleeping.
Johnson used Apple Pay and exploited the stolen devices' functions to buy more Apple products, profiting extensively from Apple's vulnerabilities.
💰 Selling the Phones
After stealing money, Johnson would erase the iPhone using the passcode and password, then sell it for profit.
He targeted specific iPhone models and could make up to $20,000 a weekend just from selling the stolen phones.
Johnson also used the stolen Apple products and their functions to acquire more cash and products.
🛡️ Protecting Yourself
Apple introduced the stolen device protection setting to combat these crimes, but it needs to be manually turned on in iOS 17.3 to be effective.
This setting adds a line of defense to the phone, requiring biometric scans to change Apple ID passwords and access saved passwords.
The speaker also advised users to create stronger passcodes, avoid storing passwords in notes, and stay vigilant about their surroundings.
⏭️ The Future of iPhone Theft
Johnson's group was thought to have stolen $300,000, but he claims the total was likely between one and $2 million.
He expressed regret and a desire to change his life upon release, urging others not to follow in his footsteps.
He acknowledged that new tricks may emerge but expressed his intention to focus on bettering himself and his life for his kids.