Other Curiosity question on stolen iPhone

[d4zza]

Hi, so I've recently read a few threads on people's iPhones being stolen, typically snatched directly from their hands in some cases.

I'm just wondering, if the phone is on the lock screen, can a thief actually do anything with it at that point?
Also, what if it's happened after you've activated remote erase?

Both questions are assuming you have biometrics activated or the passcode isn't easily guessable.

 

[Helmsley]

My understanding is that an iPhone is essentially a brick if blocked after being stolen.

This is why you see so many people online asking how to unlock a blocked iPhone...they've bought an iPhone cheap from a thief, no questions asked, then they realise it's blocked and essentially a brick.

Sometimes, thieves will sell a blocked iPhone for parts.

 

[now i see it]

If the iPhone has a physical SIM card, the thief just swaps your SIM into his phone — and creates hell like you can’t imagine

 

[Helmsley]

If the iPhone has a physical SIM card, the thief just swaps your SIM into his phone — and creates hell like you can’t imagine

Which is why I have SIM PIN enabled. Hackable? Yes. But it buys some time until your network block the SIM.

 

[Jackbequickly]

iPhones can be hacked. Many bricked iPhone are sent and sold overseas after hacked and erased, ready for the new user.

 

[FreakinEurekan]

The real answer is "It depends" - if you're on current iOS, and have "Stolen Device Protection" enabled, and know your Apple ID password, you're in pretty good shape. You can remote-lock/erase the phone and get a replacement, and go on with your day.

As for what they'll do with the phone - part it out. Even THAT is going to be made more difficult, since Apple is going to be extending Activation Lock to PARTS of the phone, not just the MLB.

 

[kitKAC]

iPhones can be hacked. Many bricked iPhone are sent and sold overseas after hacked and erased, ready for the new user.

Interesting, got any links describing how that's done?

 

[JPack]

Present fake invoice to Apple Store or submit online to remove Activation Lock.

Most parts including the display, battery, and camera can be sold.

 

[MacCheetah3]

Hi, so I've recently read a few threads on people's iPhones being stolen, typically snatched directly from their hands in some cases.

I'm just wondering, if the phone is on the lock screen, can a thief actually do anything with it at that point?
[...] assuming you have biometrics activated or the passcode isn't easily guessable.

It depends if you’ve fallen victim to a strategic theft/mugging. That is, the stories of havoc involve a tactic or aggression of obtaining the passcode first:

Apple Responds to Report About Thieves Permanently Locking Out iPhone Users

The Wall Street Journal's Nicole Nguyen and Joanna Stern today published a report highlighting how thieves can use Apple's optional recovery...

www.macrumors.com

How to protect yourself from iPhone thieves locking you out of your own device | CNN Business

A complex but concerning method of gaining control over a user’s iPhone and permanently locking them out the device appears to be on the rise.

www.cnn.com

Which, in response, Apple added:

About Stolen Device Protection for iPhone - Apple Support

Stolen Device Protection adds a layer of security when your iPhone is away from familiar locations, such as home or work.

support.apple.com

Also, what if it's happened after you've activated remote erase?

If your device is permanently lost or stolen​

If you can't find your Apple device, or you think it might have been stolen, you can erase the device remotely — which deletes all of your information (including credit and debit cards in your Apple Wallet).

Before your erase your device, make sure that you've tried everything else. Erasing your device can't be undone.

If you don't have two-factor authentication turned on for your Apple ID, you can't erase a device remotely using the Find My app. Instead, you need to use iCloud.com to erase your device, or you can first turn on two-factor authentication. Older iOS versions of the app might also require you to use the web to erase.

If you erase a device that's running iOS 15 or later, or iPadOS 15 or later, you can still use Find My to find the device. Otherwise, you won't be able to find your device after you erase it.

Use Find My to locate your lost Apple device or AirTag - Apple Support

If you lose your Apple device, personal item connected to an AirTag, or other Find My network accessory, use Find My to find it or mark it as lost to protect your device and personal information.

support.apple.com

 

[Jackbequickly]

Interesting, got any links describing how that's done?

No links. Just heard it on the news that they leave the country and were able to break the hack. Don't think that could ever be done in America but over seas . . . . .

 

[d4zza]

My understanding is that an iPhone is essentially a brick if blocked after being stolen.

This is why you see so many people online asking how to unlock a blocked iPhone...they've bought an iPhone cheap from a thief, no questions asked, then they realise it's blocked and essentially a brick.

Sometimes, thieves will sell a blocked iPhone for parts.

Ah, I suppose, spare parts would likely be more valuable than the bricked phone itself, yeah ok.

But I did think that it was essentially a brick once blocked so just wondered why there'd be a lot of thefts. I have my phone hopefully as well secured as possible so I'm not overly worried about personal data or financial details, just curiosity of what use it would be to a thief.

 

[digitalcuriosity]

Keep one hand on your iPhone and the other on a Glock.

 

[BugeyeSTI]

Keep one hand on your iPhone and the other on a Glock.

Having a Glock on your person varies greatly depending on what state (U.S.) you live in. Pretty sure almost anywhere besides the USA, you can't even carry without a serious reason to do so if at all.. Besides, shooting someone over a phone doesn't meet the threshold of using deadly force.

 

[Jackbequickly]

It does if you think your life is threatened!

 

[zorinlynx]

It depends if you’ve fallen victim to a strategic theft/mugging. That is, the stories of havoc involve a tactic or aggression of obtaining the passcode first:

Apple Responds to Report About Thieves Permanently Locking Out iPhone Users

The Wall Street Journal's Nicole Nguyen and Joanna Stern today published a report highlighting how thieves can use Apple's optional recovery...

www.macrumors.com

How to protect yourself from iPhone thieves locking you out of your own device | CNN Business

A complex but concerning method of gaining control over a user’s iPhone and permanently locking them out the device appears to be on the rise.

www.cnn.com

Which, in response, Apple added:

About Stolen Device Protection for iPhone - Apple Support

Stolen Device Protection adds a layer of security when your iPhone is away from familiar locations, such as home or work.

support.apple.com

Use Find My to locate your lost Apple device or AirTag - Apple Support

If you lose your Apple device, personal item connected to an AirTag, or other Find My network accessory, use Find My to find it or mark it as lost to protect your device and personal information.

support.apple.com

Sometimes I think Apple should implement a "panic" passcode different from your regular one. If you enter it, the phone appears to unlock, but silently notifies the authorities and contacts of your choice that someone has stolen your phone, prevents any changes to your Apple ID configuration, and after a fixed amount of time (an hour or so?) turns itself into a brick unless you remove it from your Apple ID.

 

[Lex404]

iPhones can be hacked. Many bricked iPhone are sent and sold overseas after hacked and erased, ready for the new user.

that actually happens due to social engineering.
They're usually sent to China.
then a scammer contacts the owner saying that they purchased the phone and have all the data, cards, contacts, everything and asks them to remove it from the account "to delete sensitive data".
the owners panic, don't know and do it.

if you refuse to erase it they'll threaten you trying to make you erase it. just don't do it.

they have few scripts, sometimes saying their old granny bought it, or sick daughter, or something that wants to make the users feel sorry for them.

Only apple can erase iCloud properly, or the user. what's happening with stolen phones are just scams.

 

[eRondeau]

Happened to a co-worker on vacation in Ireland. She had just unlocked her phone with Face ID then some dude zoomed up to her on a little scooter and grabbed the now-unlocked iPhone right out of her hands. He disappeared in a few seconds. Clearly he waited until she unlocked it then swiped it... he knew exactly what he was doing.

 

[russell_314]

Hi, so I've recently read a few threads on people's iPhones being stolen, typically snatched directly from their hands in some cases.

I'm just wondering, if the phone is on the lock screen, can a thief actually do anything with it at that point?
Also, what if it's happened after you've activated remote erase?

Both questions are assuming you have biometrics activated or the passcode isn't easily guessable.

If they your passcode by watching you type it over your shoulder then they have control over not just your phone but your entire Apple account.

Once the thief enters your passcode, he changes your Apple account password locking you out. At that point he could use Find My to locate your other Apple devices such as your Mac at home to steal them. If your passwords are stored in your Apple account, they will have access to things like your banking accounts and of course two factor authentication using your phone or cell number.

The very best case scenario is they only reset your iPhone to factory to resell it.

Never use your passcode in a public place. If a thief grabs your unlocked phone that you unlocked with Face ID he still has access to some things, but he cannot completely take over your Apple account.

 

[Jackbequickly]

that actually happens due to social engineering.
They're usually sent to China.
then a scammer contacts the owner saying that they purchased the phone and have all the data, cards, contacts, everything and asks them to remove it from the account "to delete sensitive data".
the owners panic, don't know and do it.

if you refuse to erase it they'll threaten you trying to make you erase it. just don't do it.

they have few scripts, sometimes saying their old granny bought it, or sick daughter, or something that wants to make the users feel sorry for them.

Only apple can erase iCloud properly, or the user. what's happening with stolen phones are just scams.

‘After doing more research, I found that a lot of these “bricked” iPhone go to Nigeria. I am sure china gets its share. If there is any value to anything, there are people there to exploit it.

 

[d4zza]

If they your passcode by watching you type it over your shoulder then they have control over not just your phone but your entire Apple account.

Once the thief enters your passcode, he changes your Apple account password locking you out. At that point he could use Find My to locate your other Apple devices such as your Mac at home to steal them. If your passwords are stored in your Apple account, they will have access to things like your banking accounts and of course two factor authentication using your phone or cell number.

The very best case scenario is they only reset your iPhone to factory to resell it.

Never use your passcode in a public place. If a thief grabs your unlocked phone that you unlocked with Face ID he still has access to some things, but he cannot completely take over your Apple account.

Thanks for this. Yeah, I only use FaceID/TouchID on any devices. I do work in Cyber Security although far away from mobile devices so other things like MFA or complex passwords are also in use but appreciate the additional information.

 

[d4zza]

Keep one hand on your iPhone and the other on a Glock.

I'd like to hope this in jest but if not then I'm from a country that thankfully doesn't do gun culture. We had one school shooting 30 years ago, immediately tightened the laws that's been the only such incident of it's kind. But I'm well aware that laws can only work if a culture isn't already too far gone. I'm not sure changing laws would work everywhere.