Grok Bot 分析 iPhone 备份，查出机场 USB 植入的间谍配置

leopardracer @leopardracer原推发布于 2026.10.27

在 X 上打开原推

elon musk's grok bot found a hidden profile on my phone that recorded my screen, camera and location for 19 days. $12,400 was stolen from my bank account using 2FA codes screenshotted off my screen in real time. all from 20 minutes of charging at the airport my flight was delayed. i sat down at gate B6 and plugged into the free USB port built into the armrest. 20 minutes. that's it nothing happened. no popup. no notification. phone charged and i went home two weeks later Chase calls me. suspicious wire transfer. $8,200 to an account i've never heard of. i open Zelle, two more. $2,400 on the 12th. $1,800 on the 17th. all three went through. all three had my 2FA codes i couldn't figure out how. i have authenticator apps. i don't click links. i don't download random shit. my passwords are all unique i plugged my iPhone into my MacBook and ran grok on the full device backup the first thing it found made me put my phone down a hidden MDM profile. mobile device management, the same system companies use to control work phones. remote camera. remote mic. screen recording. location tracking. full access to messages, photos, contacts, browser history. and a rogue root certificate that intercepted every HTTPS connection on my phone it was called "AirPort Free Wi-Fi." it installed itself silently through the USB cable at the airport. no permission screen. no popup. nothing. just slid right in server: http://185.234.72.xxx location: Chisinau, Moldova domain age: 4 months WHOIS: privacy-protected 19 days active. 847 commands executed on my phone. 612 location pings, one every 15 minutes. they mapped my apartment. my office. my daughter's school. my entire daily routine for almost three weeks 94 screenshots pulled from my phone. my Chase balance. my iMessage threads. my gmail password reset screens. my authenticator app with the codes on display. they didn't need to hack anything. they just watched my screen and used the codes before i could 4,291 photos exported. 1,247 contacts. 2,840 URLs from my browser history the part that hit me the hardest was the location data. they had my daughter's school pinpointed by day 3. they knew what time i dropped her off and picked her up. every day for 19 days $12,400. three transactions. all approved with 2FA codes they screenshotted off my phone in real time. by the time Chase flagged it the money was already in Moldova i didn't get hacked by clicking a link. i didn't download malware. i plugged my phone into a USB port at an airport to charge it while i waited for my flight what i did that night: > removed the MDM profile and the rogue root certificate > changed every password from my wife's laptop, not from my phone > froze all cards, disputed all three transactions > called the bank and put verbal verification on wire transfers > filed a police report and an FTC complaint > ordered a $12 USB data blocker off amazon. that's all it would have taken my wife asked me why i was up at 3am. i showed her the grok output. she didn't say anything for about ten minutes. then she asked if they had photos of our daughter. they did. 4,291 of them check your phone right now. settings > general > VPN & device management. if there is anything there you don't recognize, screenshot it and remove it immediately don't ever plug your phone into a USB port you don't own. not at the airport. not at the hotel. not at the coffee shop. bring a wall adapter. bring a power bank. a USB cable is not just power. it's a data connection straight into your phone the full scan takes 3 minutes. the prompt is in the comments. run it tonight on every phone in your house. send this to anyone you know who travels

这条是引用着另一条写的：x.com/gippp69/status/2115018135396905000