A teenager and a young adult in Moscow have confessed to orchestrating a ransomware attack that used the “Find My iPhone” feature to compromise iPhone and iPad devices in Australia and other countries.
According to a report in the South China Morning Post, Russian authorities said police raided the suspects' apartments and seized items allegedly used in illegal activities, including computers, phones and SIM cards.
The duo likely acquired iCloud usernames and passwords through Find My iPhone, then remotely locked up the devices before demanding a ransom in a variant of a message — “Hacked by Oleg Pliss. For unlock device YOU NEED send voucher code by 100 $/eur one of this(Moneypack/Ukash/PaySafeCard)to email@example.com I sent code 2618911226”. Apple has said iCloud was not compromised.
While the suspects' names have not been released, documents show one previously has faced hacking charges.