It could be God sometimes or it could be the power.

這有時候可能是上帝，或者是力量。

I'm here because I got too carried away.

我淪落到這裡是因為我做得太過分。

And sometimes when you do that, you end up places like this.

有時當你這樣做，就會淪落到這種地方。

Aaron Johnson is due to spend the next several years at this high-security prison because he stole hundreds of iPhones and from them hundreds of thousands of dollars.

亞倫·強森將在這所高度安全的監獄中度過未來的幾年，因為他偷了數百部 iPhone，從中盜取了數十萬美元。

He exploited a vulnerability in Apple's software.

他利用了蘋果軟體中的一個漏洞。

The same vulnerability I've been investigating for the last year.

這也是我去年一直在調查的漏洞。

He grabbed the phone and then disappeared.

他拿走電話，然後就消失了。

Along with others, Johnson seen here in red would target people in and around bars in Minneapolis to get their phones and their passcodes.

與其他人一起，這裡穿著紅色的約強森會在明尼阿波利斯的酒吧周圍找尋目標，偷取他們的手機和解鎖密碼。

I just watch them put it in.

我就看著他們輸入密碼。

How many numbers?

幾個數字？

Six. Rarely I get four digits.

六個。很少是四個。

In cities across the country, these are using the iPhone passcode to get into stolen phones and loot their victims' bank accounts and money apps and lock them out of their Apple accounts. Sometimes for good.

在全國各地的城市中，這些人使用 iPhone 密碼登入被偷的手機，搶奪受害者的銀行帳戶和金融應用程式，並封鎖他們的蘋果帳戶。有時甚至是永久性的。

Following our investigation into these widespread crimes, Apple created new security software,

在我們對這些大規模犯罪的調查後，蘋果公司推出了新的安全軟體。

but you'll have to turn on the stolen device protection setting and even then some loopholes remain the biggest loophole you.

但你必須打開被盜設備保護設定，即便如此，仍然存在一些漏洞，其中最大的漏洞是你。

That's why I sat down with Johnson to learn how he tricked victims and turned Apple's security vulnerability into a lucrative business.

這就是為什麼我坐下來與強森交談，了解他如何欺騙受害者，將蘋果的安全漏洞變成一個有利可圖的事業。

How did you get involved with stealing phones?

你是如何參與偷手機的？

So, at first I just started pickpocket the phones.

起初，我只是開始扒手機。

I didn't get the passcode or nothing. I just got the phone.

我沒拿到密碼什麼的。我只是偷手機。

I was homeless.

我無家可歸。

I didn't have nothing.

我一無所有。

Started having kids and needed money.

開始有了孩子，需要錢。

So I couldn't really find a job.

我真的找不到工作。

Let's say it's Friday night, we meet at a bar.

比方說，星期五晚上我們在酒吧見面。

I have an iPhone 15 Pro Max. What happens?

我有一部 iPhone 15 Pro Max。會發生什麼？

I say I have the drugs.

我會說我有毒品。

They say they want the drugs and I tell them to take my information down. The whole time, I don't have any drugs.

他們說他們要毒品，我告訴他們記下我的信息。整個過程中，我其實根本沒有毒品。

So as soon as the phone's in my hand, I just ask them, what's the code or I watch them put it in before they give it to me.

所以一旦拿到手機，我就問他們密碼是什麼，或者我在他們交給我的時候看他們輸入密碼。

And then I kind of just talk about other things.

然後我就聊其他事情。

Is there an age of person you're looking for when you're out?

你在作案時是否會尋找特定年齡的人？

College.

大學生。

Because they're more partying and they are already drunk and don't know what's going on for real.

因為他們更喜歡狂歡，他們已經喝醉了，不知道什麼是是真的。

I interviewed a number of Johnson's victims.

我採訪了一些強森的受害者。

All men under 30.

他們都是 30 歲以下的男性。

I was approached by two men who seemed very ecstatic.

我被兩個看起來非常興奮的男人接近。

Some told me Johnson approached them, offering drugs,

有些受害者告訴我約強森接近他們，提供毒品，

Definitely had cocaine.

肯定有古柯鹼。

They were like, "Do you want to buy some?"

他們說：「你想買點嗎？」

And I was like, "No."

我說：「不要。」

Others told me Johnson would say he was a rapper and wanted to add them on Snapchat.

還有人告訴我，強森會說自己是一位饒舌歌手，想要 在Snapchat 上加他們為朋友。

Just a Snapchat.

我想說只是個 Snapchat。

Like that's just, that just seems normal. When I open up the phone and I hand it to him to...

好像那只是，那只是看起來很正常。當我打開手機並把它遞給他...

I lock the phone and then I tell him that it's locked or something's wrong with your phone, it locked on me.

我鎖上手機，然後告訴他它被鎖住了，或者你的手機出現了問題，被我鎖住了。

And then that's when they, "Ok. No problem. 2664 something, something."

然後他們就會說：「好的，沒問題。密碼是 2664 什麼的。」

Or they just do it for me.

或者他們會幫我輸入。

You ever videotape them?

你給他們錄過像嗎？

Yeah.

有。

Videotaped a lot of numbers.

錄下了很多數字。

Never did this and people say, "Hey, you took my phone."

難道你這樣做的的時後，沒有人說過：「嘿，你拿了我的手機。」嗎？

Yeah, but by that time it's already, I don't have it no more.

有啊，但那時它已經太遲了，已經不在我身上了。

So.. - Who has it?

所以... - 那在誰身上？

Whoever I passed it to.

救我遞給的人。

This wasn't a one man job, a police investigation alleged that Johnson worked with others.

這不是單獨作案，警方的調查聲稱強森與其他人合作。

According to his arrest warrant, he used trickery and violence to get the phones.

根據他的逮捕令，他用詭計和暴力拿到了手機。

Johnson who's now 26, pled guilty to racketeering and was sentenced to 94 months in prison.

現年 26 歲的強森承認犯有敲詐勒索罪，並被判處 94 個月監禁。

You've got the phone, you've got the passcode, what do you do next?

你拿到手機，拿到密碼，下一步會怎麼做？

It's kind of like a, like a bank robbery.

這有點像就像搶劫銀行一樣。

You gotta be quick, you gotta go to the settings and go to iCloud, click reset password and put the six-digit code in and make my own password.

你得快點，你必須進入設定，然後進入 iCloud，點擊「重置密碼」，輸入六位數的密碼，然後創我自己的密碼。

And then I turn on Find My iPhone and then that completely locks them off the phone.

然後我就打開「尋找我的 iPhone」，然後就能完全將他們從手機上鎖定。

This was the bit that was so crazy to me when I first started reporting on this crime.

就是這一點，當我剛開始報導這一罪行時，我覺得這太瘋狂了。

With just the passcode to an iPhone, a thief can change someone's Apple ID password and do a host of other things to your account and phone.

只要有iPhone的密碼，竊賊就能更改某人的 Apple ID 密碼，對你的帳戶和手機進行各種其他操作。

How fast were you changing Apple ID passwords?

你換 Apple ID 的密碼速度有多快？

Faster than you could say supercalifragilisticexpialidocious.

比你說的「用易碎的美麗補償可教育性的缺失」這個字還要快。

I got to that fast where I can do it just right there.

我的速度快到一下子就好了。

So why are you doing this so fast?

那你為什麼要這麼快？

So that I can take control and they don't have access to it anymore.

這樣我就可以掌控手機，他們就無法再登入了。

And you got to beat the mice to the cheeses.

而且你要比老鼠更快地抵達乳酪。

With the passcode Johnson removed the owner's face from face ID and enrolled his own, making it easier to gain access to saved passwords to bank apps.

使用密碼，強森將所有者的臉從 Face ID 中刪除並加入了自己的臉，這樣就更容易登入保存在銀行應用程序中的密碼。

This is my phone, right?

這是我的手機，對不對？

You've got into my settings. Where are you going from here?

你已經進到我的設置。接下來會怎麼做？

So then I go add my face on there on the face ID verification.

然後我就去加入我的臉，進行Face ID驗證。

Now when you got your face on there, you got the key to everything. Things that people thought were safe.

現在，當你的臉存入手機時，你就擁有了所有東西的鑰匙。人們認為是安全的東西。

Like? - Savings, checkings, cryptocurrency apps.

像什麼？ - 儲蓄，支票，加密貨幣應用程式。

Venmo. - Venmo. Paypal.

Venmo. - Venmo。Paypal。

Yeah, you don't need face for none of that.

是啊，這些都不需要臉部識別。

That's kind of little money.

這些都是少少的錢。

I'm trying to take as much as I can.

我想盡量多拿一點。

If Johnson couldn't unlock the apps with his face, he'd look elsewhere on the phone.

如果強森不能用他的臉解鎖應用程式，他就會在手機裡找別的地方。

I go through their notes and the password to everything is in there.

我會翻看他們的記事本，所有東西的密碼都在裡面。

Social security number, everything.

社會安全號碼，所有東西。

While victims were sleeping, Johnson would be draining money from their bank accounts.

在受害者睡覺時，強森會從他們的銀行帳戶中提取資金。

Before 5 am, I would have everything transferred out of the bank.

在早上5點之前，我會將所有資金轉出銀行。

But then if some people have, like, credit line or something, that's when I would go shopping with it, go get, you know, nice stuff.

但如果有人有信用額度之類的東西，那時我就會去購物，買一些好東西。

Yeah, just by beeping my face on, that's all I got to do is put my face on it and beep and I can swipe for thousands of dollars, clothes, shoes, you know, all type of stuff, kids stuff.

是的，只要用我的臉一掃，我只需把我的臉加入，發出嗶的聲音，我就可以刷上千美元，衣服，鞋子，各種各樣的東西，還有兒童用品。

There was one more trick to this scheme. Ater stealing the money, Johnson would erase the iPhone.

這個計畫還有一個技巧。在偷了錢之後，強森會刪除 iPhone 上的所有數據。

Yes. Using the passcode and password and sell it.

是的，使用密碼和密碼，然後將其出售。

Was there an average selling price of an iphone that you would sell?

你賣 iPhone 的平均售價是多少？

If it's a iPhone 14 Pro Max with one terabyte, I probably get like $900.

如果是擁有 1 TB的 iPhone 14 Pro Max，我可能能賣到約 900美元。

Johnson said he'd typically look for those iphone Pros with their telltale three cameras.

強森表示，他通常會尋找那些帶有明顯三個攝像頭的 iPhone Pro。

For a 128 gigabyte or 256 gigabyte iPhone Pro or Pro Max, he'd get about $650.

一部 128G 或 256G 的 iPhone Pro 或 Pro Max，他可能能賣到約 650 美元。

For a regular non Pro iPhone, he'd get $300 to $400.

一部普通，非 Pro 系列的 iPhone，他可能能賣到 300 至 400 美元。

Probably get like 5 to 10 phones a night.

我可能每晚拿偷五到十部手機。

So 10, 20, 30. 30 phones from Friday to Sunday.

所以，從星期五到星期天可能有 30 部手機。

He said he could make up to $20,000 a weekend just from selling the phones.

他說他每週末賣手機可以賺取高達 $20,000。

And while he did steal some Android phones,

雖然他確實偷了一些安卓手機，

There's more value to the iPhone.

iPhone 更有價值。

But here's the kicker. Johnson was using stolen Apple products and their Apple pay function to buy more Apple products.

令人驚訝的是，強森使用被盜的蘋果產品及其 Apple Pay 功能來購買更多的蘋果產品。

It was an extensive scheme of profiting off of Apple's vulnerabilities and products.

這是一個利用蘋果的漏洞和產品謀利的廣泛計畫。

I go to Target, probably get like 3, 4 iPad Pros.

我去 Target，可能會買三到四台的 iPad Pro。

Yeah, brand new in the pack, like $1200, $1300.

是啊，全新包裝，大概 $1200，$1300。

Then I'll sell it with the iPhones.

然後我就把它和蘋果手機一起賣掉。

You were using the Apple products to get cash.

你在用蘋果產品套現。

Yeah, exactly what I was doing.

是啊，正是我做的事情。

Do you think Apple should be doing more?

你認為蘋果公司應該做得更多嗎？

Yes. I think Apple should do more to protect people.

是的。我認為蘋果公司應該採取更多措施來保護用戶。

But first they got to hire me.

但首先他們得僱用我。

I'm just playing.

我搞得不錯。

Well, Apple has done more but now you need to do more too.

蘋果已經做了更多措施，但現在你也需要做得更多。

A week after I visited Johnson, Apple answered our months of reporting on these crimes with the stolen device protection setting.

在我拜訪強森一周後，蘋果公司透過被盜設備保護設定回應了我們幾個月來對這些犯罪行為的報告。

When it's available in IOS 17.3, it will be off by default.

當它在 iOS 17.3 中可用時，它將預設為關閉。

If you don't turn it on, all of Johnson's tricks will still work.

如果你不打開它，強森的所有伎倆仍然會起作用。

If you do turn it onl, it adds a line of defense to your phone when you're away from home or work.

如果你確實打開了，當你離開家或工作時，它會為你的手機增加一道防線。

A thief would need your face or fingerprint scan to change an Apple ID password.

小偷需要你的臉部或指紋掃描才能更改 Apple ID 密碼。

Then they'd need to wait an hour and then again, they would need your biometrics.

然後他們需要等待一個小時，然後再次需要你的生物識別資訊。

Same goes for adding a new face ID and disabling Find My iPhone; to access save passwords, a thief would need your biometrics.

添加新的 Face ID 和停用「尋找我的 iPhone」也是如此； 要存取保存的密碼，小偷需要你的生物識別資訊。

Still, some apps like Venmo are vulnerable and using Apple Pay to buy things would still work.

儘管如此，像 Venmo 這樣的應用程式仍然很容易受到攻擊，使用 Apple Pay 購買東西仍然可以使用。

Also, don't store your passwords in the notes app.

此外，不要將密碼存儲在記事本中。

Everything that you can ever imagine is in the notes or within the photos.

你能想像的各種東西都存在記事本或是照片中。

Plus, you should just create a stronger passcode one that uses letters and numbers.

另外，應該創建一個使用字母和數字的更強大的密碼。

And of course, don't get your passcode out.

當然還有不要洩露密碼。

I mean, watch your surroundings, stay on top of it. That's all.

注意周圍環境，保持關注。就這樣。

According to the warrant, Johnson's group was thought to have stolen $300,000.

根據逮捕令，強森的團夥被認為盜竊了 30 萬美元。

Johnson says that the grand total was probably somewhere between $1 millon and $2 million.

強森表示，總金額可能在 100 萬至 200 萬美元之間。

Do you ever wish you didn't know this trick?

你曾希望自己不知道這一招嗎？

I mean, I wish I would have not being so greedy and just got what I got and changed my life.

我真希望自己當初不要那麼貪婪，淪落這樣的下場，改變了我的人生。

I truly, I'm sorry for all the people that I stole from, probably ruin your life.

我真的，我為那些我偷了他的東西，可能會毀了他的的生活的人感到抱歉。

But I just felt like my life was ruined and I had nowhere else to go.

但我覺得我的生活被毀了，我無處可去。

When you get out, you gonna forget about this trick?

當你出來的時候你會忘記這一個伎倆嗎？

There's gonna be new tricks out, but I don't want no parts of it.

到時候會有新伎倆，的但我不想要參與其中。

I'm just gonna be do better for myself, my life, for my kids.

我會為了我自己，我的人生，我的小孩當個更好的人。