Published 4 months ago • loading... • Updated 4 months ago
FBI Stymied by Apple's Lockdown Mode After Seizing Journalist's iPhone
Apple’s Lockdown Mode prevented the FBI’s forensic team from accessing a reporter’s iPhone seized during a leak investigation, showing strong defense against sophisticated spyware.
On Jan. 14, FBI agents seized Hannah Natanson's iPhone during a raid, but a Jan. 30 court filing shows Lockdown Mode blocked the FBI Computer Analysis Response Team from accessing it.
Apple says Lockdown Mode is an 'extreme protection' introduced in 2022 that limits message attachments, restricts web features, and blocks accessory connections unless the device is unlocked.
The FBI Computer Analysis Response Team failed to extract data from the seized iPhone because it was in Lockdown Mode, and agents recovered only limited SIM card data with a telephone number report.
Civil liberties groups warn the seizure threatens press protections under the 1980 federal law on newsgathering materials, while Attorney General Pam Bondi says the leak has significant national security implications.
The episode highlights Lockdown Mode's real-world effectiveness at blocking forensic tools from companies like Cellebrite, though its tradeoffs may be worth it for high-risk users and frustrate law enforcement forensic teams.
A Washington Post reporter prevents U.S. federal police from accessing communications from their iPhone thanks to an Apple-activated function in 2022 that strengthens the protection of devices from specialized cyberattacks