Amazon iPhone 16 Hack Warning Issued—What You Need To Know

Amazon recently hit the news headlines after a “recovery impossible” ransomware attack targeted Awaken Web Services users. The iPhone 16 has also seen security coverage following research that managed to hack the new USB-C port on the popular cellphone. Now, the iPhone 16 is back in the spotlight as an alleged hack attack revolving around the smartphone is reportedly hitting customers of the Amazon consumer service this time. Here’s what you need to know.

ForbesNew Password Hack Warning—Act Now If Yours Is On This ListBy Davey Winder

The Amazon iPhone 16 Hack Warning

I can first recall hearing about the Amazon iPhone 16 hack attack about three months ago, when users on Reddit complained of getting calls from what purported to be Amazon customer services checking if an order for the smartphone was correct. In the meantime, the hack attack has come and gone, always involving an order for the iPhone 16, always coming from what appears to be Amazon customer services. Now a worrying new twist has been reported following a TikTok video of a victim claiming their Amazon account was successfully hacked using the method.

The attack apparently started with a phone call from claimed to be Amazon customer services, suggesting that their account had been compromised and action was urgently required to address this. The victim was wary and made this known, but the caller advised the proof was in her Amazon account: check your basket for an order for an iPhone 16, they were told. This they did, and there was nothing there. The so-called Amazon representative asked them to refresh their screen, and lo and behold, not only was there one order but a total of eight iPhone 16 smartphones sitting in the basket. This was enough, apparently, to convince the person that the account needed to be closed immediately to prevent the fraud from occurring. This involved, they were told, a one-time code that would be texted to them. Click on this code, then sign out of your Amazon account, were the instructions given. Of course, this then gave the attacker control over the account—assuming they already had access to the customer’s username and password.

ForbesWhatsApp Security Alert As Broken Link Hackers StrikeBy Davey Winder

The Details Of This Amazon Attack Require Closer Inspection

To be honest, many loose ends need to be tied off regarding this latest incident, as reported. Not least the method used to add the iPhones to the customer basket, or at least give that appearance. Also, to use the one-time code trick, those account details would already need to be known, which would suggest a compromise elsewhere and shared credentials being used. Whatever, at this stage, I think it’s still worth considering this a threat and being aware that Amazon customer services will not call you, nor will they enquire if your order is correct or offer to send you a one-time code by text message.

I have approached Amazon for a statement.

Follow me on Twitter or LinkedIn. Check out my website or some of my other work here.