ECONOMY & WORK
MONEY 101
NEWS
PERSONAL FINANCE
NET WORTH
About Us Contact Us Privacy Policy Terms of Use DMCA Opt-out of personalized ads
© Copyright 2023 Market Realist. Market Realist is a registered trademark. All Rights Reserved. People may receive compensation for some links to products and services on this website. Offers may be subject to change without notice.
MARKETREALIST.COM / NEWS

Scammers Made $400K in 2 Years Exploiting Apple’s ‘Someone Else Picks It Up’ Feature

Since 2021, Apple has been sending out identical alerts to people in over 150 countries, indicating that the threat is real and persistent.
PUBLISHED APR 22, 2024
Cover Image Source: The Apple company logo hangs above an Apple retail store| Photo by Scott Olson | Getty Images
Cover Image Source: The Apple company logo hangs above an Apple retail store| Photo by Scott Olson | Getty Images

Experts at a cybersecurity conference raised concerns about a feature on the Apple Store Online called 'Someone else picks it up.' Scammers exploited this feature and made off with more than $400,000 in just two years.

Image Source: Apple phones on display in an Apple store | Photo by Joe Raedle | Getty Images
Apple phones on display in an Apple store | Photo by Joe Raedle | Getty Images

In September 2022, researchers Gyuyeon Kim and Hyunho Cho of the Financial Security Institute of South Korea learned about many significant cyberattacks on more than fifty popular online retailers. Numerous instances of compromised sensitive information were made evident by these attacks. Without being discovered, the fraudsters were able to manipulate these online retailers' payment sites. Together with genuine transactions, they diverted credit card numbers and personal information to their servers.

If you allow someone else—a friend or family member—to pick up your online order at an Apple Store and present them with proof of purchase, you have the choice to do so. Therefore, scammers obtained credit card information that had been stolen. Using these cards, they would make online purchases of Apple devices, designating certain individuals from thrift stores as authorized pick-up recipients. As an illustration, suppose they used the stolen card to pay only $800 for the $1,000 iPhone. Following the pickup of the iPhone by the employee of the thrift store, the con artists would keep the $800 that the victim had paid.

Image Source: Attendees look at brand new Apple products during an Apple event | Photo by Justin Sullivan/Getty Images
Image Source: Attendees look at brand new Apple products during an Apple event | Photo by Justin Sullivan/Getty Images

The research group called the Apple store scam "Poisoned Apple." Based on hints such as purchasing a domain name from a Chinese ISP, they believe the offenders are Chinese. On the dark web, they came across material written in simplified Chinese that was linked to an email address that had been inadvertently left in the source code. The entire operation was discovered by the researchers when they came across a web server running software that the thieves were using to gather stolen data. The offenders' IP address was revealed by configuration errors even though they were hiding behind several layers of IP addresses utilizing Cloudflare's content delivery networks.

Apple has alerted iPhone customers in 92 countries to possible harmful threats. The potential of mercenary malware attacks was brought to light by this advisory, which was issued in early April. The business underlined how severe the situation is and said that these attacks probably target particular people because of who they are or what they do. Apple has been alerting customers about this vulnerability for a long time; since 2021, they have been sending out identical alerts to people in over 150 countries. This indicates that the threat is real and persistent.

Image Source: Customers try out the new iPhone 15 at an Apple store| Photo by Lintao Zhang | Getty Images
Customers try out the new iPhone 15 at an Apple store| Photo by Lintao Zhang | Getty Images

These are extremely sophisticated attacks, especially the ones that use the NSO Group's Pegasus spyware. An Israeli business called NSO specializes in remote iPhone hacking. A US judge decided in Meta's favor in March 2024, ordering NSO to turn over its Pegasus code. Pegasus malware can take over a mobile device and use it to send and receive messages, make calls, and steal personal data. These attacks frequently linked to governmental or corporate groups call for substantial resources and specially designed strategies for certain targets.

MORE ON MARKET REALIST
The guest made it clear that he intended to hold on to the precious instrument for life.
5 hours ago
The priest could've won the game if he hadn't failed to guess answers based on Bible clues.
1 day ago
The guest's children called it ugly but she held on to it as it made her feel at peace.
2 days ago
The contestant decided to do something different for the third slot and that backfired.
2 days ago
Charli and her sister were called out for being out of touch with the everyday reality of workers.
2 days ago
Former Amazon workers also commented giving further clarity about the meaning of the label.
2 days ago
The cards were placed on a board with notes handwritten by some of the players in them.
3 days ago
The country star also shared advice with the kids about investing the money and saving some of it.
3 days ago
In the years after the rejection of "Shark Tank," the firm grabbed the attention of big players such as Richard Branson.
3 days ago
His uncle had bought it for $10 in London while serving as a soldier in World War II.
3 days ago
The host Jennings and the winner of the game both quickly apologized for the problematic mistake.
4 days ago
Sharks have also endured some of the worst pitches in America while making profits from several investments.
4 days ago
Costco's generous return policy has resulted in numerous bizarre stories shared online.
4 days ago
The boy first thought of it when he was just 8 years old and started working on it with his father.
5 days ago
The TikTok campaign helped the user collect a lot more than he intended to through a fundraiser.
5 days ago
Thornton has been a familiar voice for the audiences for more than a decade now.
5 days ago
The actor had brought an ancient treasure and was playing his character from a Netflix movie.
5 days ago
The TikToker has seen it happen only a couple of times but says checking is always better.
6 days ago
Users pointed out how the glitch was too obvious to be missed by the production team.
6 days ago