Hackers who held Apple devices to ransom detained in Russia
Russian authorities say they have detained two young hackers who hijacked Apple devices and held them ransom for a sum of money before relinquishing control. — The hackers - aged 17 and 23 - were detained in the course of …
Context & Ripple Effects
The detentions are the enforcement sequel to a story that broke less than two weeks earlier, when Australian owners found their Apple iDevices locked and held for ransom — a demand for payment before the hijackers relinquished control of the handsets. Russian authorities have now detained two suspects, aged 17 and 23, closing the loop between the crime and its alleged perpetrators.
The pickup pattern shows how narrowly the story travelled inside one ecosystem: eight Apple-centric outlets — MacRumors, TUAW, iDownloadBlog, iPhone Hacks among them — carried the same wire, while general-interest titles like the Guardian and Sydney Morning Herald framed it as a crime story. It also extends an old thread: back in [[a:1181776|2007 the Financial Times flagged how Apple's rising popularity was beginning to lure hackers]], and the intervening years turned consumer Apple accounts into a monetisable target rather than a curiosity.
First-order effects
- Australian victims of the lock-and-ransom scheme get the outcome they lacked on 27 May: identified suspects, though restitution for anyone who paid depends on what Russian investigators recover.
Second-order effects
- The scheme exploited remote-lock mechanisms tied to user accounts, so Apple faces renewed pressure to harden account recovery and password-reset flows against social-engineering attacks that bypass the device itself.
Third-order effects
- A single ransom crew operating from Russia against victims in Australia previews the structural problem for all connected-device makers: theft now crosses borders instantly, while enforcement requires bilateral police cooperation measured in weeks or months.
The trend: Consumer device ecosystems are shifting from hardware-theft targets to account-level ransom surfaces, with law-enforcement response lagging behind the borderless nature of the attacks.