someone locked my phone

Hi All,

I have exactly the same problem, Two step authentication is on from the beginning. I noticed this due to the fact that i get a lot of two step auth request via my iPhone from "kaluga russia" i live in the Netherlands. My Apple Watch had a passlock after i noticed this (i could get rid of this to reset my apple watch) but now my macbook aswell. And i cannot reset this due tot the fact of my documents and they also setup a firmware password. So i cannot even get into the recovery modes CMD+R .

It looks like he could successfully access my account even when i did not allowed hem to login (via the popup in my iPhone) and for all the devices that does not have a passlock het could create one. That why my Apple Watch and MacBook Air has one now and my iPad and other iPhone not due tot the fact that they have already a passlock

In the message i see the following mailadres apple.help@gmx.com.

So this hack is a very advanced one because he could enter your account without the two step authentication. Could be that Apple forgot to check for an two step auth in some line of codes.

the hack isn't advanced at all... it is even very simple. The only thing that the hacker needs is your account password.

When you access www.icloud.com from an unknown PC or Mac you need double authentification to have full access to your account, BUT even though you don't enter the double authentification code you can access "Find my iPhone" (see the picture below... even though it's the french version, I think you will recognize the Find my iPhone icon at the bottom of the page). You will only have to enter the iCloud account password and will be able to lock the iPhone or Mac belonging to the account

21.51 I got 2FK notification which is I realized that my account was compromised

2.54 I changed the password through icloud.com

Your account was not compromised. Your Mac was.

You will have to present your proof of purchase and your Mac to an AASP or ARS. This can't be done by phone.

End of story, fortunately my Macbook Pro has just fixed by Apple Authorized Service Provider ( AASP ) in my city ( Surabaya ).

It was iBox in Plasa Marina.

They charged 300k IDR, and everything has normal, no data lost. But you have to shown the Invoice when you bought the Macbook, to proof your ownership.

Today there are more than 20 cases with the same problem, and all of them has to paid 300k IDR (about 25 usd) to fix it.

In this case, the Hacker we're Ransomed my MBP, and AASP collecting the money ....

I dont know is this their intention ..... hopefully Apple aware in this case.

Make sure you verify your devices status and account credentials ONLY at http://appleid.apple.com/

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support: https://support.apple.com/en-ca/HT204759

I have just had this same issue and found this link is the best advice to follow: https://support.apple.com/en-gb/HT204145.Particularly the section named 'How do I gain control of my Apple ID?'.

You will need a trusted device or phone number to hand to verify the unlocking, but this has worked for me. I'd suggest changing all passwords afterwards, just in case!

Is not matter of phishing emails, because if that could break the OS and inject such script then the OS is definitely to revise asap! mine was not.. and I went through several security tests with the Apple Center,I'm a professional and I pay extreme attention to such scam..but here we are talking about some exploit Apple need to take care of, it's spreading and it takes control of the device, never EVER happened with my Apple devices since iphone 3G, I must say it is worrying, don't feel safe any longer,

I've got the same issue with my iMac - my other two devices had two step authentication and the attempt was made to lock them by someone who hacked my iCloud account or AppleID, so I disallowed and jumped in and changed the password. But they'd been successful on the iMac. Same email address given on the start up screen when I open the IMac.

I am dealing with the same issue on my IPad...i have been on the phone for over 5 hours trying to figure out how to fix it.... I cant access my IPad at all...no matter what we do...i bought it like 7 years ago and don't know if i have proof of purchase and have no apple store anywhere near me. Any suggestions?!?!?

4 friends or colleagues of mine had the same issue on their Mac or iPad yersterday.

Their devices have been locked from their iCloud account even though they had double factor authentification activated.

They got in touch with Apple genius at the closest AppleStore and have been told that the issue is widly spreading...

their devices (Mac or iPad) will be unlocked by Apple but it shows that someone is able to bypass the 2 factors authentification processus to access iCloud accounts OR is able to remotely lock a device without entering the iCloud account.

I have the same issue my iMac is locked and they are asking for a 6 digit code. I have spoken to apple and i can not enter the recovery mode as a password is set. ( I have not done this).

Does anyone know how to resolve this please

to add

If they do "lock your phone" with Lost Mode, ignore their message and enter your usual passcode to turn it off.

However, this proves they DO KNOW your password if they were able to do this... so change it ASAP!!

not really..I had NO password for my iphone AND tablet but still locked out. however you want to put it down THEY do managed to hack Icloud at server level and THAT is not safe for any of us no matter security on your phone or mac or tablet, feel no safe to use icloud anymore.

I think you didn't understand the explanation.

That's not your iphone code that they know, but your iCloud account password!

Lists of icloud accounts with their valid password are in the wild (obtained by different hacking exploits as the one of yahoo some years ago). Your account is certainly in these lists and if you have activated double factor authentification, as far as they know your iCloud account password, they can remotely lock your phone or Mac using the "find my phone" feature to put it in "lost mode".

THEY do managed to hack Icloud at server level and THAT is not safe

I highly doubt this. What makes you come to this conclusion?

It will be the first known compromise of the iCloud server.

Phishing your credentials from you is not a hack .