STOLEN IPHONE, MAC, OR IPAD?: iCloud Scam in Barcelona

17/02/2016
|

… Exactly, if your iPhone, Mac, iPad, or any Apple device with iCloud has been stolen, here’s what to do:

7 Preventive Tips

  1. Always keep a record of your IMEI and your device’s MAC, your serial number , and the IP of your usual connection, as well as the version of your usual browser .
  2. This first step is because you will need to block the line with your phone company and the device itself via iCloud.
  3. Do not set a trusted contact as “Family” (an iCloud option) unless they are aware of the scams associated with iCloud.
    Reactive
  4. Access iCloud directly and put your device in lost mode to trigger an alert and show its last known location.
  5. Block the device to prevent access to your data.
  6. It goes without saying that you must have a screen lock code and two-factor authentication for ALL networks and services (iCloud included).
  7. Login passwords for iCloud, social media, email, and other services should not be remembered in the browser, and you should never leave your computer without logging out first. Why? Because you would be leaving your life open to others.

4 Tips for Filing a Report: File the report providing the following information:

  1. Last sessions and IP addresses from which the device, social media, and email were used.
  2. DO NOT pay attention to SMS messages and emails you will receive that look similar to this and invite you to a website exactly like Apple’s, along with all the information you have collected.
  3. File your report with the Police or the Duty Court.
    1. Guardia Civil (GDT)
    2. National Police
    3. Mossos D’Esquadra
    4. Ertzaintza
    5. Foral Police of Navarre
  4. Wait without waiting, stay alert, collect suspicious information about unauthorized logins, new locations, check Wallapop, Vibbo, Mil Anuncios… in search of your device.

Rising Trend: How the iPhone Theft iCloud Scam Works

We have just had 4 cases of Apple device thefts in Barcelona in the past two weeks.

Case 1) Returned to its owner

  • Modus operandi
        1. Device stolen in Barcelona
        2. Client blocks it via iCloud
        3. Sold on Wallapop
        4. Client receives SMS from a French phone number
        5. They hire us, we trace the phone number and find its owner
        6. Repatriation negotiated
        7. Satisfied client.

Case 2) 2 clients fall for the scam link

 

  • Modus operandi

 

        1. Device stolen in Barcelona
        2. Client blocks it via iCloud
        3. Client receives SMS from a French phone number but with a URL (falsified to appear as iCloud)
        1. Clicks on the URL received from the scammers, thereby releasing their device
        2. Scammers under investigation and whereabouts unknown (they steal devices, send SMS to the phone owner or contact person) and ask them to enter username and password.

 

 

Case 3) Theft and social engineering

  • Modus Operandi

 

        1. Device stolen in Barcelona
        2. Client blocks it via iCloud
      1. Client receives a tailored email for their psychological profile from a newly created Gmail account, asking them to provide their iCloud username and password or the device will not be returned.

3 Problems with these scam cases

  1. The ‘whois’ (DNA of a website) for scams shows them registered in Congo, France, England, Pakistan…
  2. They use VPNs
  3. They quickly change infrastructure; it’s rare for them to maintain their infrastructure for more than 4/5 days.

But then… Why should you report it?

We give you 2 reasons

  1. ALL reports are necessary; the more reports there are, the more pieces of the puzzle we will have to stop this disorganized crime.
  2. If a report is filed with the Police and courts and these are publicly echoed, as in this post today, there will be fewer victims in the future who, like you, have not only lost their device and their information, but also lose money, time, and peace of mind.

 

False promises, the police can’t do more. What is Find My iPhone for?

  • So you know
  • Warning: No police force can enter someone’s home without a warrant to verify if your device is inside.
    • Neither the National Police, nor the Guardia Civil, nor the Mossos d’Esquadra, nor the Ertzaintza, nor the Foral Police of Navarre will go to the location that appears if it is a private house; if it is an apartment building, perhaps.

5 Tips if you have been a Victim of iPhone theft:

  1. Never let your device out of your sight; keep it controlled and protected
  2. Review all your open session data
  3. Report it
  4. Do not hesitate to insist; it is your right. Do not be convinced at first glance that nothing can be done; nothing can only be done when nothing is done.
  5. Speak with an expert (call us or come see us).

Digital Identity

Methods for analyzing and
assessing online
reputation damage