Overview
- Infoblox researchers detailed a global marketplace on Telegram and the web selling iPhone unlocking and phishing tools, linking more than 10,000 Apple lookalike domains and a 350% rise in related traffic last year.
- The kits copy Apple’s Find My pages to lure victims into entering passcodes or iCloud logins, which lets attackers remove Activation Lock and take control of stolen devices.
- The toolsets commonly bundle jailbreak claims, “Find My iPhone Off” phishing kits, and scripts or AI voice calls to run scams, with pay-per-use prices often under $10.
- Some tools pull device details to personalize lures and then wipe the phone once access is gained, clearing data and preparing the handset for resale.
- Telegram removed several groups tied to these services after WIRED asked about them, and the high resale premium for unlocked phones helps drive snatch-and-phish thefts that can lead to bank account takeovers.