An anonymous hacker who has exploited an iCloud security flaw that lets anyone unlock a lost or stolen iPhone says Apple contacted him about the matter today, but he deleted the email.
“They have asked me to contact [them] as quickly as possible, but why now?” the hacker, who goes by AquaXetine, said in an email to Cult of Mac. “I’ve already warned Apple couple months ago.” Cult of Mac confirmed that the email did in fact come from Apple.
The hack, which is the first of its kind, bypasses the iCloud security system for locked iOS devices called Activation Lock. By using the free DoulCi site, which appeared to be offline most of the day but is now back up, a locked iOS device can be tricked into thinking it’s talking to Apple’s iCloud servers when connected to a computer.