4 ms·
This could be used as a way to get someone to type in their password (required on restart) in a visible environment where it can be captured by thieves. The thi
by gnicholas 3y ago
This could be used as a way to get someone to type in their password (required on restart) in a visible environment where it can be captured by thieves. The thieves then steal/rob the phone from the person, and can access the phone, including sensitive banking apps. This allows thieves to steal a phone but get something much more valuable — thousands of dollars in bank transfers.
- kstrauser 3y agoYou can also use the tool's "Nearby Action Setup New iPhone" attack to pop up a "Set Up New iPhone" prompt showing the owner's Apple ID email address. I just tested this on my own phone, saw my own Apple ID, and screenshotted it for posterity.