If Your iPhone is Stolen, These Guys May Try to iPhish You
Summary: A KrebsOnSecurity investigation describes an iCloud phishing service, hosted on a Russian server shared by at least 140 other domains, that supplies stolen Apple credentials to thieves who use them to unlock, wipe and resell stolen iPhones. The server leaked a list of roughly 137 paying users, and one reseller, "Jonatan," phished his own iCloud account, letting the source log in and find records of at least 65 hacked IDs and pricing of $40 per phishing message for iPhone 4 models versus $120 for iPhone 6s and 6s Plus.
Why it matters: The same Find My iPhone credentials that let a victim lock or erase a stolen device let the thief unlock and wipe it for resale, and this service sells that access for as little as $80 a month to resellers who charge $120 per phishing message against newer iPhones.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026