You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

💡 Did you know?

⏺ If you can't accept iCloud Terms and Conditions... Learn more >

⏺ If you don't see your iCloud notes in the Notes app... Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

someone locked my phone

Someone activated find my iPhone and my phone locked. I followed all instructions and made sure that phone is activated for my icloud account (my aunt was first user). There i could see that my phone is in locked mode. I clicked erase iphone and then i deactivated iphone from my account in order to perform hard reset (nothing else worked). But my iphone is still locked and I don't know what to do. Please help.


P.S. I suspect that someone hacked onto my icloud account so I changed password and security questions. When i turn it on it says: write to email apprestore05@***

<Email Edited by Host>

iPhone 4, iOS 7.1.2

Posted on Jul 23, 2017 10:41 AM

Reply
Question marked as Top-ranking reply

Posted on Jul 29, 2017 10:28 AM

Hi All,


I have exactly the same problem, Two step authentication is on from the beginning. I noticed this due to the fact that i get a lot of two step auth request via my iPhone from "kaluga russia" i live in the Netherlands. My Apple Watch had a passlock after i noticed this (i could get rid of this to reset my apple watch) but now my macbook aswell. And i cannot reset this due tot the fact of my documents and they also setup a firmware password. So i cannot even get into the recovery modes CMD+R .


It looks like he could successfully access my account even when i did not allowed hem to login (via the popup in my iPhone) and for all the devices that does not have a passlock het could create one. That why my Apple Watch and MacBook Air has one now and my iPad and other iPhone not due tot the fact that they have already a passlock


In the message i see the following mailadres apple.help@gmx.com.


So this hack is a very advanced one because he could enter your account without the two step authentication. Could be that Apple forgot to check for an two step auth in some line of codes.

75 replies

Aug 6, 2017 9:23 AM in response to HiEM

I have never set any passcode for my phone and I've changed my icloud password right I after I got hacked.


Sorry my friend... something just doesn't add up here. If you could change your password, you are in control of your account and should be in control of your device.


Hacked implies loss of control.

Aug 6, 2017 6:03 PM in response to LACAllen

It is indeed a bit funny in my case. I've tried everything to get back control with my acc but lost the entire connection with my phone. I don't know if this means the hackers have improved their skills or just me having really bad luck.

Well, one more day to go then I'll head to the Apple Store in the city.

Hopefully they can get me an answer or at least point me a way to recover my data!

Aug 10, 2017 9:53 AM in response to Remy Leroy

Exactly happen with me just now


21.51 I got 2FK notification which is I realized that my account was compromised

2.54 I changed the password through icloud.com

2.57 My Macbook Pro is LOCKED


I got notification that my iPhone also turn in Lost mode, but fortunately it's safe until now.

I've scheduled Apple service to call me tommorow 8.15am, hope they can help to solve this common issue

Aug 10, 2017 4:22 PM in response to LACAllen

Where can I get Apple Authorized Service Provider or Apple Retail store in Surabaya, Indonesia ?

Anyway, I dont know how this ******* guy can get my AppleID n Password, I'm proffesional and I understand phissing method from email, and never input my password.


But seems this guy can log in to icloud.com and in the same time I got 2FK authentication in my other device (iPhone).

Unfortunately, icloud.com allowed us to access Find my iPhone without 2FK !!!

Apple assume that in case we lost everything apple device, so no chance to get 2FK notification.


And when he can login to Find my iPhone ..... this guy can do anything.


I dont think that I still have the Invoice, it was 4 years ago !!


I share this issue to Facebook, and found some friends also facing the same problem.


Come on Apple, please do something.

Aug 10, 2017 7:16 PM in response to Zoky1988

A little update.

So basically there is no way for Apple to unlock my phone at all as it is locked with a passcode.

The only company that can do it would be Cellebrite which is the Israeli forensic company that cracked the Iphone passcode for FBI earlier 😎 And obviously they won't take my case.

I thought I would just surrender to the hacker and ask how much they want.

Danggggggg

The email address they put on my phone was reported which means I will have no way to retrieve the passcode they set for me.

Well, I will probably have to reset my phone to factory mode and lose all the precious memories.

Lesson learnt.

I just hope that Apple can develop a better security system that can prevent hacking like this. I have myself to blame not to do regular back up but sometimes incident like this happens so fast and so sudden and if Apple is able to strengthen the security system, we may not have to face situation like this.
Finger cross I won't be target again.

Aug 11, 2017 4:48 AM in response to Zoky1988

I had this issue with my 2008 iMac. Passcode was required before I could use it, but I smelled a rat when I saw the email address on the screen apprestore05@xxxxxx. I contacted Apple Support who advised I should take into the Genuis Bar. I contacted them by email first to make sure they could help.


When I took it to the Apple Store they simply removed a stick of RAM, reset the PRAM by restarting whilst pressing cmd, opt, p and r together and waiting for three chimes. Low and behold my iMac came back to life, passcode scam free. All they needed to do then was pop the RAM back in and restart again. Relief - and no charge!


The guys at Genius Bar explained 'there had been a brute hack on some iCloud accounts where the Find my Mac service had locked out certain machines as if they had lost'. Some people have fallen for the scam and emailed the scam address only to be blackmailed into handing over money to get a passcode. Needless to say the code never arrives and they are asked to send more money to get it. They'd seen 25 such cases that week alone.


Whatever you do, don't contact the email - contact Apple Support instead!

Aug 11, 2017 5:23 AM in response to wenian

Thanks for giving this info. This method works on machines pre 2010, unfortunately not the later models.


However, I will be calling apple support to reopen my case, pointing them in the direction of this thread as it is clear this has happened to a number of people. They outright refused to help me due to lack of proof of purchase (I buy most of my machines used).

Aug 13, 2017 10:53 PM in response to exoac90

Change your iCloud password on appleid.apple.com Web page and wait until Thursday with no fear.

Nothing will go worse.

If it's a Mac that has been remotely locked, your datas are safe and you will regain access to them as soon as Apple will have reset the EFI to unlock it.

If it's an iPhone or iPad you should be able to by-pass the lock by using your own password, but Apple support will tell how on Thursday.

Aug 14, 2017 4:49 AM in response to stefanuswardoyo

Same thing happens to me.


I got notification about My Apple ID is being used from Istanbul (whereas I live in Indonesia, Jakarta). And then my MBP and iPhone got locked.


My MBP just finished repaired from Apple Store in Singapore (Orchard road) just a week ago, and now my Apple ID is hacked. When I call the Apple specialist, they ask me if I ever put my MBP somewhere else. So, I'm suspecting that.


The irony is, the hacker ask 50$ for unlocking, while the iBox (local premium reseller - There's no Apple Store in here) ask around 70$ (20$ for service fee and another 40$ for re-install the MacOS)! What make it different from the hacker!?

Sep 9, 2017 10:26 AM in response to Bellezza811

I went to the Apple Store and I contacted Apple Support as well. In both cases, they outright said it's not possible to bypass the passcode for this kind of hack or phishing scam or whatever it is. I don't know what countries some of these replies are from, but proof of purchase or not, Apple will not remove the passcode from your device. I'm from the UK.

Oct 17, 2017 7:36 PM in response to Zoky1988

I got the "kaluga hack" on my iPhone, iPad, apple watch, and macbook air, all at the same time.


With no "trusted devices" left in my arsenal, i thought I was hosed or stuck waiting for the Recovery mode to finish on Apple's end (72hrs-??).


I then had a bright idea.. I took my iPhone's SIM card out and put it in my wife's phone. BOOM! her phone became my number and I was then able to reset my iCloud account using her phone as my "trusted device".. I was then able to get my phone, watch, and iPad all back online and unlocked.. The only tricky one is the MacBook. The hack puts the MAC into a firmware lock, which if you never set that yourself.. there is NOTHING you can do but give the phone to apple store to unlock for you..


Hope this reply helps someone.

someone locked my phone

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.