Grok Bot 在二手 iPhone 中发现预装 MDM 配置

leopardracer @leopardracer原推发布于 2026.10.28

在 X 上打开原推

elon musk's grok bot found a hidden MDM profile pre-installed on my iPhone 15 pro max that i bought on amazon renewed for $649. 47 days later someone filed fake tax returns with the IRS using both my and my wife's social security numbers. $71,000 stolen. Chase, Schwab and Amex accounts all hit the same week the phone came in Amazon's certified box. sealed. "Inspected and tested by Amazon." i set it up, signed into iCloud, connected to my home WiFi. normal two months later the IRS sends a letter. someone already filed our taxes. both of us. the refunds went to prepaid Visa cards registered to a fake address in Flushing, NY. $43,800 on mine. $27,200 on my wife's same week Chase flags a wire transfer i didn't make. $8,100 to an account i've never seen. then Amex calls about $4,200 in charges at a Walmart in Houston. then i check Schwab and someone tried to liquidate my Roth IRA for $31,400. three different institutions, all in the same five days i don't click links. i don't install random apps. i use unique passwords and 2FA on everything. i couldn't figure out how they got our SSNs. they're on paper W-2s stored on a Synology NAS in my house that isn't even exposed to the internet i ran grok on the full device backup it found a configuration profile called "Device Optimize Pro." MDM, mobile device management. the same system Apple sells to companies like Google and JPMorgan to manage employee phones. remote wipe, silent app install, screen recording, mic access, full keychain dump. 12 out of 12 capabilities flagged critical. it was installed before i ever turned the phone on. pre-activation. someone in the Amazon supply chain put it there the profile connected to api.deviceopt-pro[.]cn. a server in Shenzhen, China. Tencent Cloud. domain registered 7 months ago through http://west.cn, WHOIS redacted. it had been checking in 60 times a day for 47 straight days. 2,814 total commands executed on my phone there was also a hidden WireGuard VPN tunnel. always on. invisible in Settings. every byte of traffic routed through Shenzhen. and they installed their own root certificate, "SZ Trusted Root", which let them decrypt every HTTPS connection in real time. my Chase app. my Gmail. my Schwab portfolio. all plaintext on their end they grabbed 14 WiFi passwords including my home network. used that to get on my Synology NAS at 192.168.1.47. went straight to /volume1/tax/2023/. opened W-2_John_2023.pdf and W-2_Sarah_2023.pdf. pulled both SSNs. filed fake returns with the IRS on January 29th at 6:41am UTC from the same Tencent Cloud IP the MDM profile phones home to the damage: → $43,800 fraudulent federal refund, my SSN → $27,200 fraudulent federal refund, wife's SSN → $4,200 unauthorized Amex charges → $8,100 attempted Chase wire (blocked) → $31,400 attempted Schwab liquidation (blocked) → 247 saved logins stolen including Apple ID, Google, Chase, Schwab, Coinbase → 891 keychain entries dumped → 3 credit cards: Chase Visa, Amex Platinum, Schwab debit → 4,291 photos exported → 847 contacts exported → 2.3 GB total sent to Shenzhen over 47 days what i did that night: → removed the MDM profile and hidden VPN → revoked the rogue root certificate → rotated every password, all 247, from my wife's MacBook → called Chase, Amex and Schwab. cancelled every card. froze every account → filed IRS Form 14039 for both of us, identity theft affidavit → froze credit at Equifax, Experian and TransUnion → changed every credential on the NAS and pulled it off the network → full DFU wipe on the iPhone Amazon refunded the $649. Chase reversed the wire. Schwab caught the liquidation in time. Amex is "investigating." the IRS told us 6 to 9 months. we check our credit every week now. we still don't know if someone opened accounts or took out loans under our names a $649 phone. $71,000 in confirmed fraud. $39,500 more in attempts that got caught. two social security numbers sitting in a database somewhere in Shenzhen if you bought a renewed or refurbished iPhone from Amazon, Best Buy, eBay, Back Market, Swappa, anywhere, run the scan tonight. the grok prompt is in the comments. it takes 3 minutes. check every phone in your house don't save $300 on a phone and lose everything else

这条是引用着另一条写的：x.com/leopardracer/status/2093282462491091301