DilationEffect: Users using someone else's Apple ID should pay attention to the security of their encrypted wallets, with stolen funds exceeding 10 million USD
ChainCatcher message, research by the security agency DilationEffect indicates that purchasing someone else's Apple ID may lead to others stealing cryptocurrency assets from wallets by restoring data. Currently, there are established criminal gangs, and on-chain data shows that the stolen funds exceed 10 million USD.
DilationEffect points out that there are restrictions on downloading apps from the App Store based on countries or regions, for example, accounts from mainland China cannot download certain apps. Many users purchase (from Taobao) or use shared US Apple IDs online. Because the iPhone's backup mechanism backs up app data to the cloud, attackers can restore your wallet app data on their phone using the same Apple ID as yours.
DilationEffect warns that users with iPhones who have installed wallet apps, if you have purchased or used someone else's Apple ID, please stop using it immediately and transfer your wallet assets right away. (Source link)