Australian Apple devices locked in suspected Apple ID hack

Overnight, many Australian users of Apple's devices, both iOS and OS X, have woken up to find access to their devices locked by hackers asking for US$100 to unlock them.
Written by Chris Duckett, Contributor

A number of Australian users of Apple's iCloud connected devices woke up this morning to the shock of finding themselves locked out of their devices.

The hackers' message on an iMac
(Image: Screenshot of post by amberoonie)

Apple customers are finding that their phones, tablets, and even desktops and laptops, are showing a message originating in Apple's find my device service that states "Device hacked by Oleg Pliss" and the user send US$100 to unlock the device.

Affected users have descended upon a community Apple support thread, with some users finding that not only has their device been hacked, but a passcode has been added, presumably from the Find My iPhone section in Apple's iCloud, preventing the users from accessing or restoring their device.

Users with passcodes on their devices report being able to acess the device again by restoring it from a backup using iTunes.

One user, holidaying in London, reports being able to take their device into an Apple store, but no solution was found as they appear to have not had a passcode on the device prior to the attack.

The attack was initiated in the early hours of the morning across Australian, with one user, deskokat, reporting being woken up at 4:30am with the associated 'hacked by Oleg Pliss' message and sounds being played out of their iPad.

"I thought it was the morning alarm. I just signed in with my code, and all seems ok. I then signed in to my powerbook — but as a guest user — VERY grateful I did," deskokat wrote.

"Message to say I'd been hacked there too, wouldn't let me sign out without erasing all data for that user. As there was nothing but a couple of expendable files on there, I signed out. And the guest user portal has been erased. I then went into my own (password protected) desktop, no hacking message. Have changed my Apple ID password."

The user reported receiving 15 messages in their hotmail account stating that a "lost" status was applied to all their devices through Find My iPhone services, sounds were played, and all devices were subsequently marked as "found".

Vodafone and Optus told ZDNet that they had received no calls from customers on the issue.

A Telstra spokesperson said they were aware of the reports, and have referred the matter to Apple.

"In the meantime customers who need assistance can contact Apple Care," Telstra said.

Comment has been sought from Apple, but had not been received by the time of publication.

It is presumed that the hackers have gained access to the user's Apple ID credentials, and from that point on, have been able to access the Find My iPhone service to lock the devices.

The attack arrives as reports surface that Apple is set to unveil a home control system at WWDC next week.

Update: Added comment from Telstra, Vodafone, and Optus

Editorial standards