Skip to content

Apple now has new issues with store pickup for online orders — all the details about scam that cost over $400,000

By | Published | No Comments

In recent disclosures at the Black Hat Asia conference, security researchers revealed a sophisticated cybercriminal scheme that exploited Apple Store Online’s “Someone else will pick it up” feature. The vulnerability reportedly netted criminals more than $400,000 in just two years.

“Airport pick-up” scam revealed

Cybercriminals use a two-pronged strategy to carry out their scams. Initially, their second-hand online platform in South Korea (similar to Craigslist or eBay) sold Apple products at discounted prices. Once the buyer agrees to the purchase, the criminals use the stolen credit card details to purchase the actual product from the Apple Store. Instead of shipping the purchased items, they chose the “someone else will pick it up” option.This reportedly allowed buyers to unknowingly participate in the scam, using government ID and QR codes/order numbers to pick up items from Apple retail stores 9to5mac.

Also read: iPhone 16 may get on-device LLM support for generative AI: Get all the details on Apple’s plans for iOS 18

poison apple plan

Researchers Gyuyeon Kim and Hyunho Cho named the scam “PoisonedApple,” and it’s proven to be highly profitable. By purchasing an iPhone 15 at a discounted price of $700 and then selling it for the actual price of $800, criminals make a profit of $700, with all costs borne by the original credit card owner.

Apple’s stance and investigative challenges

In some extreme cases, Apple’s unwillingness to cooperate has hindered investigations. Despite the victims’ efforts to report the incidents to their credit card companies and police, Apple’s internal policies caused significant delays in the investigation.

Also read: Upcoming iPad Air expected to feature 12.9-inch Mini LED display; check other upgrades

Global scope and culprits

While the current scheme targets South Korea and Japan, researchers suspect the culprit is located in China, as the phishing pages were registered through Chinese internet service providers. Evidence also points to mentions in Simplified Chinese on darknet forums, suggesting the scheme could potentially expand to other regions, including the United States.

In light of these findings, it’s important to be vigilant when shopping online and be wary of deals that seem too good to be true. Always make sure to verify the authenticity of sellers and platforms and report any suspicious activity immediately.

And one more thing! We can now use WhatsApp channels! Follow us so you don’t miss any updates from the world of technology. ‎To follow the HT Tech channel on WhatsApp, click here Join now!

Follow us on Google news ,Twitter , and Join Whatsapp Group of thelocalreport.in

Surja, a dedicated blog writer and explorer of diverse topics, holds a Bachelor's degree in Science. Her writing journey unfolds as a fascinating exploration of knowledge and creativity.With a background in B.Sc, Surja brings a unique perspective to the world of blogging. Hers articles delve into a wide array of subjects, showcasing her versatility and passion for learning. Whether she's decoding scientific phenomena or sharing insights from her explorations, Surja's blogs reflect a commitment to making complex ideas accessible.