Hacker reveals just how easily he can steal all your data from your iPhone and drain your bank accounts: ‘It takes ten seconds’ | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker | #hacking | #aihp

Kyle Sandilands shocked his co-star Jackie ‘O’ Henderson on Friday by revealing just how easily a US hacker can gain access to any iPhone.

The radio king, 52, told his co-host, 49, that Aaron Johnson from Minnesota had devised a sneaky trick for gaining unauthorised access to someone’s device.

‘The Wall Street Journal interviewed Aaron, who was jailed for hacking into hundreds of people’s iPhones and draining their bank accounts,’ Kyle began. 

‘Aaron reveals just how easy it is to hack into anyone’s iPhone. He asks someone if he can put their number into their phone and as soon as the phone is in his hand he asks for the code.

‘He puts the six digit code in and then turns off Find My iPhone, which locks them out. It takes ten seconds to change passwords,’ Kyle added.

Jackie O was quick to challenge Kyle’s claim and said a person would have to be pretty gullible to just hand over their iPhone to a person they barely know.

‘That is so ridiculous. Maybe there’s stupid people out there who would fall for it. I’m out as a target, he wouldn’t get me,’ she said.

Kyle shot back that the guy was a skilled conman and had ways of breaking down people’s defenses.

Fortunately, the chances of Johnson hacking anyone’s phone in the near future is very low, as he is currently serving eight years at the Minnesota Correctional Facility, for stealing over $AU450,000 between 2021 and 2022.

Johnson would visit local bars, befriend young people, discreetly watch them enter their passcodes, then take their phones. 

Having memorised their passcodes, he would then log into the devices, change the passwords and lock the victims out of their Apple IDs. 

He would also register his own face into the phone’s Face ID and remove the owner’s biometric.

That vital hack granted him access to the phone’s password keychain – where their log in credentials for banking apps were readily available.

Johnson drained thousands of dollars from the accounts – often before the victim even realised their phone had been swiped.

The security flaw is what prompted the recent launch of Apple’s ‘Stolen Device Protection’ – a setting that prevents cyber-criminals from locking iPhone users out of their Apple accounts or accessing any of their passwords stored in Apple’s Keychain.