An underground market is supplying criminals with techniques to unlock stolen iPhones and launch phishing attacks against victims' contacts. The ecosystem targets bank accounts and sensitive data.
Thieves now have access to tools and methods that bypass iPhone security, enabling them to access device contents and impersonate owners through their contact lists.
Once unlocked, criminals send phishing messages to the victim's contacts, posing as the device owner to trick recipients into revealing banking credentials and personal information. This two-stage attack multiplies the damage beyond the initial theft.
The criminal ecosystem operates through forums and marketplaces where specialized services are traded. Some vendors offer device unlocking expertise, while others provide phishing templates or buyer lists compiled from previous victims.
Apple's security features have made this process more difficult than in previous years, but determined attackers continue finding workarounds. The vulnerability highlights the danger posed by physical device theft in today's interconnected digital environment.
Security experts recommend enabling two-factor authentication, marking devices as lost in iCloud immediately after theft, and warning contacts about potential phishing attempts.
Hacking group FulcrumSec claims to have stolen 86 GB of data from Manchester Airports Group. Security researchers confirmed the breach included detailed customer, booking, and travel records.
Multiple extensions in the Chrome Web Store and Microsoft Edge delivered malware that stole cryptocurrency, browser data, and user history while injecting fraudulent ClickFix lures.
A new survey reveals strong public opposition in the UK to government surveillance of encrypted communications. The findings highlight growing concern over privacy rights as lawmakers continue debating message scanning proposals.
PaperCut has released a second emergency security update for its NG and MF print management software after researchers discovered bypass methods for the initial fixes. The vulnerabilities are currently being exploited in the wild.