Hackers Reveal Fraud Methods As Police To Steal Apple Account Data
JAKARTA - A recent interview with one of the cybercriminals affiliated with the doxxing group, provides information about their motive and method of operation to obtain personal data from large companies.
To Wired, the Exempt team member admitted that the cybercriminals often falsify law enforcement emails and even use the hacked apparatus's accounts to request user data illegally.
In the case, the mode used is to send data requests to law enforcement response teams in large companies such as Apple and Amazon.
From there, this group bought a domain very similar to the domain of the official institution, falsified the phone number of the police station, and made a request document that resembled the original warrant or subpoena.
They even included related laws and used the names of judges on duty to strengthen the credibility of the request.
Regarding the request for information itself, the Exempt team admitted that they were very careful in imitating the appearance and nuances of official documents.
The goal is for companies to believe and eventually provide information about certain users or groups, and then sell the information to third parties.
He said that they had succeeded in making Apple provide user personal information, including home address, email, and phone number. Even so, iCloud data such as photos and secure records and not leaked.
Apple insists that requests for emergency data must be sent via official email of government or police agencies, and must be marked as an "Emergency Request" according to the company's legal guidelines.
SEE ALSO:
However, the limited verification process in emergency situations makes this system vulnerable to misuse.
Although this attack method looks worrying, general users don't actually need to panic. Because according to him, the hacker group usually targets certain victims with personal motives or potential benefits, not random users.
However, users are still advised to be aware of suspicious emails or messages on behalf of government agencies, considering similar schemes have appeared via iMessage at the end of 2025.