"Thief spills secrets on hacking iPhones to steal $300,000 from strangers' bank accounts"

A thief named Aaron Johnson has revealed how he stole over $300,000 from strangers' bank accounts by hacking into their iPhones. Johnson would befriend young people at bars, watch them enter their passcodes, and then steal their phones. He would change the passwords, lock the victims out of their Apple IDs, and enroll his own face into the Face ID. This gave him access to the phone's password keychain, where he found banking app credentials. Johnson and his accomplices drained thousands of dollars from the victims' accounts before they even realized their phones were missing. Apple has since launched a new setting called Stolen Device Protection to prevent cyber-criminals from locking iPhone users out of their accounts or accessing their passwords.