Thieves Use Cheap Telegram Tools to Unlock Stolen iPhones

Infoblox researchers uncovered a thriving underground marketplace on Telegram where thieves sell cheap tools and phishing infrastructure to unlock stolen iPhones. Despite Apple's Activation Lock security features, which render locked devices nearly worthless on the black market, over 7.35 million iPhones are stolen annually in the United States. The investigation revealed that criminals prioritize hardware value over data, utilizing sophisticated social engineering tactics to bypass security. These methods include smishing campaigns with fake Apple Find My pages, AI voice calls impersonating support staff, and automated bots that extract device information to craft convincing phishing messages. Unlocking services cost between $5 and $50, targeting recent iPhone models by tricking owners into surrendering credentials. Researchers identified over 10,000 domains associated with these illicit activities, noting that no actual zero-day vulnerabilities are exploited. Instead, threat actors rely on psychological manipulation and low-cost software kits. This digital supply chain enables the rapid monetization of stolen high-end devices, highlighting a significant gap between hardware security measures and user vulnerability to targeted phishing attacks.