{"id":164844,"date":"2025-12-02T20:30:12","date_gmt":"2025-12-02T20:30:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/164844\/"},"modified":"2025-12-02T20:30:12","modified_gmt":"2025-12-02T20:30:12","slug":"hack-iphones-raid-icloud-accounts","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/164844\/","title":{"rendered":"Hack iPhones, Raid iCloud Accounts"},"content":{"rendered":"<p>This is the online edition of The Wiretap newsletter, your weekly digest of cybersecurity, internet privacy and surveillance news. To get it in your inbox, <a href=\"https:\/\/www.forbes.com\/newsletter\/thewiretap\/#194e252376cf\" target=\"_self\" class=\"color-link\" title=\"https:\/\/www.forbes.com\/newsletter\/thewiretap\/#194e252376cf\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/newsletter\/thewiretap\/#194e252376cf\" aria-label=\"subscribe here\" rel=\"nofollow noopener\">subscribe here<\/a>.<\/p>\n<p>CBP is carrying out a record number of phone searches but it doesn&#8217;t reveal how often it orders tech companies to provide data. (Photo by Kevin Carter\/Getty Images)<\/p>\n<p>Getty Images<\/p>\n<p>Border patrol agencies spend millions on phone forensics tools made by companies like Cellebrite, a $4.2 billion market cap police tech provider, to search people\u2019s devices when they suspect someone of a smuggling or immigration-related crime. But a search warrant shows that the tech sometimes fails and, when it does, agents will demand tech companies like Apple provide additional data.<\/p>\n<p>According to the warrant, two women presented lawful permanent resident cards when crossing the San Ysidro, California port of entry in April. Another man in the car with them presented a passport, but agents quickly determined the ID photo didn\u2019t match. After further checks and interviews, Customs Border Protection (CBP) determined he did not have the correct documentation to enter the country. Suspecting the man was being illegally smuggled into America, all three were taken into custody. <\/p>\n<p>Agents tried searching three of the women\u2019s iPhones with Cellebrite\u2019s phone forensic devices, but \u201ccomplete mobile device data acquisition of the iPhones were unsuccessful,\u201d per the warrant. But they did discover the two women\u2019s iCloud account details. CBP officers quickly filed a search warrant application to Apple. iCloud accounts can contain backed-up iMessages, WhatsApp communications and location history.<\/p>\n<p>It\u2019s unclear what data Apple provided. The company did not respond to a request for comment at the time of publication. Though it publishes transparency reports, it\u2019s yet to provide any data on the number of government requests it has received this year.<\/p>\n<p>Both women were charged with bringing in aliens for financial gain. They have pleaded not guilty.<\/p>\n<p>As President Trump has cracked down on illegal immigration, digital border searches have skyrocketed. According to an October analysis of DHS data by <a href=\"https:\/\/www.wired.com\/story\/cbp-searched-a-record-number-of-phones-at-the-us-border-over-the-past-year\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.wired.com\/story\/cbp-searched-a-record-number-of-phones-at-the-us-border-over-the-past-year\/\" data-ga-track=\"ExternalLink:https:\/\/www.wired.com\/story\/cbp-searched-a-record-number-of-phones-at-the-us-border-over-the-past-year\/\" aria-label=\"Wired\">Wired<\/a>, CBP carried out more electronic device searches than ever in 2025, jumping 17% year-over-year. This warrant reveals more detail about that playbook: even if forensics devices fail, cloud data remains accessible via warrant or other court order.<\/p>\n<p>As Forbes previously reported, over the last year, <a href=\"https:\/\/www.forbes.com\/sites\/thomasbrewster\/2024\/11\/25\/ice-spent-millions-on-phone-hacking-tech-just-in-time-for-trumps-mass-deportation-plans\/\" target=\"_self\" class=\"color-link\" title=\"https:\/\/www.forbes.com\/sites\/thomasbrewster\/2024\/11\/25\/ice-spent-millions-on-phone-hacking-tech-just-in-time-for-trumps-mass-deportation-plans\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/thomasbrewster\/2024\/11\/25\/ice-spent-millions-on-phone-hacking-tech-just-in-time-for-trumps-mass-deportation-plans\/\" aria-label=\"CBP and ICE have been making record purchases of tools like Cellebrite\" rel=\"nofollow noopener\">CBP and ICE have been making record purchases of tools like Cellebrite<\/a> and rivals such as Grayshift, which can either break into locked phones or grab data from devices for which they\u2019ve already gained access. In September, ICE spent a record $11.1 million on a single order of Cellebrite devices. In the same month, CBP signed off on a $2 million contract with the company and another $415,000 on Grayshift licenses.<\/p>\n<p>The CBP does not release figures on the number of iCloud or other cloud-based searches it orders. It hadn\u2019t provided comment at the time of publication. <\/p>\n<p>Travellers can review guidance <a href=\"https:\/\/www.aclu.org\/know-your-rights\/what-do-when-encountering-law-enforcement-airports-and-other-ports-entry-us\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.aclu.org\/know-your-rights\/what-do-when-encountering-law-enforcement-airports-and-other-ports-entry-us\" data-ga-track=\"ExternalLink:https:\/\/www.aclu.org\/know-your-rights\/what-do-when-encountering-law-enforcement-airports-and-other-ports-entry-us\" aria-label=\"published by the ACLU\">published by the ACLU<\/a> earlier this year about rights at the border and the best ways to keep digital data private.<\/p>\n<p>Got a tip on surveillance or cybercrime? Get me on Signal at <a href=\"https:\/\/tel:+19295127964\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link invalid-url\" title=\"https:\/\/tel:+19295127964\" data-ga-track=\"ExternalLink:https:\/\/tel:+19295127964\" aria-label=\"+1 929-512-7964\">+1 929-512-7964<\/a>.<\/p>\n<p>THE BIG STORY:120,000 Connected Cameras Hacked In South Korea &#8216;Sexploitation&#8217;<\/p>\n<p>Home internet-connected cameras have often been found vulnerable to simple cyberattacks.<\/p>\n<p>getty<\/p>\n<p>Four people have been arrested in South Korea for allegedly hacking into as many as 120,000 cameras to film sexual material, which they later sold online. One of the suspects is accused of hacking 63,000 cameras, making as much as $12,000 from the stolen footage.<\/p>\n<p>The hackers were able to take advantage of poor security on home cameras, many of which were using weak passwords, according to the <a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/cj01q6p7ndlo\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.bbc.co.uk\/news\/articles\/cj01q6p7ndlo\" data-ga-track=\"ExternalLink:https:\/\/www.bbc.co.uk\/news\/articles\/cj01q6p7ndlo\" aria-label=\"BBC\">BBC<\/a>.<\/p>\n<p>Stories You Have To Read Today<\/p>\n<p>Flock Safety has been training its car surveillance AI by doing what many other AI companies do: using overseas gig workers to label data collected by its cameras, according to <a href=\"https:\/\/www.404media.co\/flock-uses-overseas-gig-workers-to-build-its-surveillance-ai\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.404media.co\/flock-uses-overseas-gig-workers-to-build-its-surveillance-ai\/\" data-ga-track=\"ExternalLink:https:\/\/www.404media.co\/flock-uses-overseas-gig-workers-to-build-its-surveillance-ai\/\" aria-label=\"404 Media\">404 Media<\/a>.<\/p>\n<p>Europol <a href=\"https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/europol-and-partners-shut-down-%E2%80%98cryptomixer%E2%80%99?mtm_campaign=press-releases-just-published-20251201&amp;utm_term=press-releases-just-published&amp;mtm_source=newsletter&amp;mtm_medium=email&amp;mtm_content=title&amp;mtm_group=news\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/europol-and-partners-shut-down-%E2%80%98cryptomixer%E2%80%99?mtm_campaign=press-releases-just-published-20251201&amp;utm_term=press-releases-just-published&amp;mtm_source=newsletter&amp;mtm_medium=email&amp;mtm_content=title&amp;mtm_group=news\" data-ga-track=\"ExternalLink:https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/europol-and-partners-shut-down-%E2%80%98cryptomixer%E2%80%99?mtm_campaign=press-releases-just-published-20251201&amp;utm_term=press-releases-just-published&amp;mtm_source=newsletter&amp;mtm_medium=email&amp;mtm_content=title&amp;mtm_group=news\" aria-label=\"announced\">announced<\/a> law enforcement had seized $29 million in bitcoin while shutting down cryptocurrency mixing service Cryptomixer, which helped criminals hide illegally-obtained crypto by facilitating money laundering. <\/p>\n<p>Independent reporter Brian Krebs <a href=\"https:\/\/krebsonsecurity.com\/2025\/11\/meet-rey-the-admin-of-scattered-lapsus-hunters\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/krebsonsecurity.com\/2025\/11\/meet-rey-the-admin-of-scattered-lapsus-hunters\/\" data-ga-track=\"ExternalLink:https:\/\/krebsonsecurity.com\/2025\/11\/meet-rey-the-admin-of-scattered-lapsus-hunters\/\" aria-label=\"claims\">claims<\/a> to have identified a key member of Scattered Lapsus$ Hunters, a hacker crew that recently claimed to have stolen Salesforce data belonging to hundreds of companies. The individuals claimed they were already cooperating with law enforcement and were trying to leave the group.<\/p>\n<p>Winner of the Week<\/p>\n<p>Court Watch, which uncovers news stories from court documents and collaborates with reporters on them, is <a href=\"https:\/\/www.courtwatch.news\/p\/help-us-turn-four\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.courtwatch.news\/p\/help-us-turn-four\" data-ga-track=\"ExternalLink:https:\/\/www.courtwatch.news\/p\/help-us-turn-four\" aria-label=\"turning four\">turning four<\/a>. Just recently, Forbes wrote a story about an American accused of <a href=\"https:\/\/www.forbes.com\/sites\/thomasbrewster\/2025\/11\/20\/illegal-nvidia-ai-chip-sales-to-china-doj-indictment\/\" target=\"_self\" class=\"color-link\" title=\"https:\/\/www.forbes.com\/sites\/thomasbrewster\/2025\/11\/20\/illegal-nvidia-ai-chip-sales-to-china-doj-indictment\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/thomasbrewster\/2025\/11\/20\/illegal-nvidia-ai-chip-sales-to-china-doj-indictment\/\" aria-label=\"illegally shipping Nvidia chips to China\" rel=\"nofollow noopener\">illegally shipping Nvidia chips to China<\/a> after Court Watch flagged it. You can support its work by subscribing. <\/p>\n<p>Loser of the Week<\/p>\n<p>OpenAI <a href=\"https:\/\/openai.com\/index\/mixpanel-incident\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/openai.com\/index\/mixpanel-incident\/\" data-ga-track=\"ExternalLink:https:\/\/openai.com\/index\/mixpanel-incident\/\" aria-label=\"confirmed\">confirmed<\/a> its data analytics provider MixPanel was hacked, exposing some users\u2019 personal information, including name and email address. The AI giant said it had stopped using MixPanel\u2019s services.<\/p>\n<p>More On Forbes<a class=\"embed-base color-body color-body-border link-embed embed-1535 link-embed--long-title\" href=\"https:\/\/www.forbes.com\/sites\/rashishrivastava\/2025\/12\/01\/-28-year-old-ai-founder-jesse-zhang-decagon-customer-service\/\" target=\"_blank\" aria-label=\"This 28-Year-Old AI Founder Thinks His Customer Service Startup Can Beat Out Companies 10x His Size\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/rashishrivastava\/2025\/12\/01\/-28-year-old-ai-founder-jesse-zhang-decagon-customer-service\/\" rel=\"nofollow noopener\">ForbesThis 28-Year-Old AI Founder Thinks His Customer Service Startup Can Beat Out Companies 10x His SizeBy Rashi Shrivastava<\/a><a class=\"embed-base color-body color-body-border link-embed embed-1538\" href=\"https:\/\/www.forbes.com\/sites\/alexyork\/2025\/12\/02\/by-the-numbers-meet-the-forbes-under-30-class-of-2026\/\" target=\"_blank\" aria-label=\"By The Numbers: Meet The Forbes Under 30 Class Of 2026\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/alexyork\/2025\/12\/02\/by-the-numbers-meet-the-forbes-under-30-class-of-2026\/\" rel=\"nofollow noopener\">ForbesBy The Numbers: Meet The Forbes Under 30 Class Of 2026By Alexandra York<\/a><a class=\"embed-base color-body color-body-border link-embed embed-1541\" href=\"https:\/\/www.forbes.com\/sites\/iainmartin\/2025\/12\/01\/how-a-tiny-polish-startup-became-the-multi-billion-dollar-voice-of-ai\/\" target=\"_blank\" aria-label=\"How A Tiny Polish Startup Became The Multi-Billion-Dollar Voice Of AI\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/iainmartin\/2025\/12\/01\/how-a-tiny-polish-startup-became-the-multi-billion-dollar-voice-of-ai\/\" rel=\"nofollow noopener\">ForbesHow A Tiny Polish Startup Became The Multi-Billion-Dollar Voice Of AIBy Iain Martin<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"This is the online edition of The Wiretap newsletter, your weekly digest of cybersecurity, internet privacy and surveillance&hellip;\n","protected":false},"author":2,"featured_media":164845,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[365,351,49513,18721,107868,107869,16104,2027,917,353,111,139,69,145],"class_list":["post-164844","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-ai","tag-apple","tag-cbp","tag-cellebrite","tag-customs-and-border-protection","tag-grayshift","tag-hack","tag-ice","tag-immigration","tag-iphone","tag-new-zealand","tag-newzealand","tag-nz","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/164844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=164844"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/164844\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/164845"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=164844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=164844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=164844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}