Roughly speaking it worked by hijacking preinstalled apps (calendar, mail, etc) and privilege escalation, to create a new account. The Apples preinstalled apps

Roughly speaking it worked by hijacking preinstalled apps (calendar, mail, etc) and privilege escalation, to create a new account. The Apples preinstalled apps, and default behavior meant the attackers could rely on certain behavior once they were in. Apples standardization is what got them.