Every year, millions of phones are stolen, and many find their way to the underground market. Now, researchers have uncovered an intricate network of cybercrime services designed specifically for accessing stolen iPhones.

The 'thriving' ecosystem includes software sellers providing unlocking tools and phishing messages. Over 10,000 phishing websites were linked to this activity last year, with traffic increasing by 350 per cent. The average cost for unlockers is below $10, suggesting a vast network of individuals involved in the scheme.

Experts warn that reselling phones isn't just about getting your device back; thieves often seek access to bank accounts and personal information. Stolen iPhones can be worth hundreds or even thousands more if unlocked, encouraging criminals to develop sophisticated methods for gaining access. This ecosystem involves multiple levels of supply chain cooperation.

While Apple and Google have improved protections, a variety of thieves still make substantial profits from stolen devices. A case in London highlighted four men handling over 5,000 phones and spending money on them from stolen financial accounts. The difference between a locked and unlocked phone can be as much as $950, incentivising the development of these unlocking tools and phishing kits.

Researchers at Infoblox identified several common features among these services: jailbreak tools for older iPhones or Android devices; 'Find My iPhone Off' phishing kits for accessing accounts; and scripts and AI voice calling software to run phishing operations. The goal is clear: physical access, unlock the phone, and gain control of its contents.