A complex but worrying method of take over control over the iPhone of a user and block him permanently from the device appears to be on the rise.
iPhone thieves are utilizing a security setting, called recovery key, that makes it nearly impossible for owners to access their photos, messages, data and more, according to a Wall Street Journal report. Some victims told the publication that their bank accounts were emptied after their financial apps were hacked.
However, it is important to note that this type of takeover is difficult to execute. It requires a criminal to observe an iPhone user entering the device's passcode — looking over their shoulder at a bar or sporting event, for example — or forcing the device owner to share their passcode. All this before they steal the device.
From there, a thief can use the passcode to change the device's Apple ID, turn off Find My iPhone so its location can't be tracked, and then reset the recovery key, a complex password code. 28 digits used to protect its owners from online hackers.
Apple requires this key to reset a password or regain access to an Apple ID in an attempt to strengthen user security. However, if a thief changes it, the original owner will not have the new code and will be locked out of the account.
“We sympathize with those who have had this experience and take all attacks against our users very seriously, no matter how rare,” an Apple spokesperson said in a statement to CNN. “We work tirelessly every day to protect our users’ accounts and data, and we are always investigating additional protections against emerging threats like this.”
On its website, Apple warns that “you are responsible for maintaining access to your trusted devices and your recovery key. If you lose both items, you may be permanently locked out of your account.”
Jeff Pollard, vice president and principal analyst at Forrester Research, said the company should offer more customer support options and “ways for Apple users to authenticate themselves so they can reset these settings.”
For now, there are just a few steps users can take to try and protect themselves from this happening to them.
Protect the access code
The first step is to secure the access code.
An Apple spokesperson told CNN that people can use Face ID or Touch ID when unlocking their phones in public to avoid revealing their passcode to anyone who might be watching.
Users can also configure a longer, alphanumeric passcode, which is more difficult for malicious individuals to discover. Device owners should also immediately change the key if they believe someone else has seen it.
Screen Time Settings
Another step that could be considered is a trick that is not endorsed by Apple but has been circulating online. Within an iPhone's Screen Time settings, which allows guardians to set restrictions on how children can use the device, there is the option to set up a secondary password that would be required of any user before they can successfully change an ID. Apple.
By enabling this, a thief would be prompted to enter this secondary password before changing an Apple ID password.
Back up your phone regularly
Finally, users can protect themselves by regularly backing up an iPhone — via iCloud or iTunes — so that data can be recovered in the event an iPhone is stolen. At the same time, users may want to store important photos or other sensitive files and data on another cloud service, such as Google Photos, Microsoft OneDrive, Amazon Photos, or Dropbox.
This won't stop a malicious individual from accessing the device, but it should limit some of the consequences if this ever happens.
Source: CNN Brasil
Charles Grill is a tech-savvy writer with over 3 years of experience in the field. He writes on a variety of technology-related topics and has a strong focus on the latest advancements in the industry. He is connected with several online news websites and is currently contributing to a technology-focused platform.
