Cybercriminals targeting minors via iPhone iCloud extortion

Criminals are targeting minors by using fraudulent Apple IDs to trigger iCloud remote management locks on iPhones, subsequently demanding ransom payments. These attacks often originate in gaming communities and messenger contacts, where perpetrators pose as peers to lure victims with promises of in-game currency or exclusive advantages.

In many instances, attackers use psychological pressure to convince users to log out of their own Apple IDs and instead enter the attacker's credentials. Once the attacker has control, they lock the device via iCloud, making the ransom demand visible to the user. Authorities and security experts advise parents and schools against paying ransoms, instead recommending the use of two-factor authentication, increased digital literacy, and reporting incidents to the police.