An intricate yet concerning trend that involves seizing control of a user's iPhone and locking them out of it permanently is on the rise. While this is alarming, there are measures you can take to safeguard against such attacks!
According to a recent report from the Wall Street Journal, cybercriminals are currently exploiting a security setting on the iPhone known as the “recovery key”, making it extremely difficult for owners to access their photos, messages, and other important data. Victims have also reported major financial losses after the thieves gained access to their banking apps through their mobile devices.
Pulling this type of takeover is challenging; however, cybercriminals are adept at knowing what to say to lure you into their scheme. It typically involves hackers either observing an iPhone user enter their passcode (e.g., by peeking over their shoulder) or persuading the device's owner to share their passcode. And all of this must occur before physically stealing the device.
Once the hacker has possession of the passcode and iPhone, they change the device's Apple ID, disable "Find my iPhone'' to avoid being tracked, and then reset the recovery key—a complex 28-digit code designed to safeguard against online attacks.
Apple introduced the recovery key to enable iPhone users to reset or regain access to an Apple ID, aiming to enhance user security systems. However, if a thief alters this key (or gets a hold of it), the original owner will be unable to obtain the new code, resulting in a full account lockout.
Apple warns users to remain cautious when it comes to protecting their recovery key, stating, "You’re responsible for maintaining access to your trusted devices and your recovery key. If you lose both of these items, you could be locked out of your account permanently.”
While safeguarding your online device might appear challenging, users can explore different techniques to learn how to protect themselves from encountering this problem!
Your initial action should always be to secure your passcodes. Using strong passwords will increase the difficulty for hackers attempting to access your mobile device compared to using weak ones. Apple recommends using Face ID or Touch ID when unlocking your phone in public to avoid revealing your passcode to potential onlookers seeking to exploit it.
One of the most crucial rules for staying safe online is to never share sensitive information with anyone unless absolutely necessary and trusted. Cybercriminals often use social engineering tactics to trick individuals into giving personal data, such as passwords or account numbers, through phishing emails, fake websites, fraudulent phone calls and even in-person interactions where they may pose as someone they are not.
To avoid falling victim to this scam, be extremely cautious before sharing any important information that could potentially put you in harm's way.
Individuals can safeguard themselves by regularly backing up their data to ensure that their information can be retrieved in the event of iPhone theft. iPhone users are also advised to store crucial photos, sensitive files and/or data in an alternative cloud service, such as Google Photos, Microsoft OneDrive, Amazon Photos, or Dropbox.
While this won't prevent a malicious actor from accessing the device, it can mitigate some of the repercussions if such an event occurs!