{"id":6849,"date":"2018-07-19T14:27:47","date_gmt":"2018-07-19T14:27:47","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29151\/Security-Review-A-Counterfeit-100-iPhone-X.html"},"modified":"2018-07-19T14:27:47","modified_gmt":"2018-07-19T14:27:47","slug":"security-review-a-counterfeit-100-iphone-x","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/","title":{"rendered":"Security Review: A Counterfeit, $100 iPhone X"},"content":{"rendered":"<p>\u201cI found an iPhone X for $100,\u201d Motherboard reporter Sarah Emerson messaged me while she was on a <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/3kjqdb\/naomi-wu-sexy-cyborg-profile-shenzhen-maker-scene\" target=\"_blank\">reporting trip in Shenzhen, China<\/a> earlier this year. \u201cYou want one?\u201d<\/p>\n<p>The answer, obviously, was yes. A few months earlier, I had traveled to Australia with iFixit to watch as it became one of the <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/7x4wxx\/ifixit-iphone-x-teardown-behind-the-scenes\" target=\"_blank\">first teams to tear down the $999 iPhone X<\/a>. I\u2019ve written extensively about <a href=\"http:\/\/www.motherboard.vice.com\/en_us\/topic\/right+to+repair\" target=\"_blank\">independent repair professionals<\/a> who source their iPhone repair parts from third-party Chinese factories. I needed to know what a $100 iPhone would be like. I eagerly checked my mailbox every day for a week until a white iPhone box arrived. It looked like a real iPhone box with images and text that was a little blurry. I opened it.<\/p>\n<p>In the back of my mind, I thought that maybe we\u2019d just somehow gotten an insane deal on a real iPhone X. What was in the box was far more interesting.<\/p>\n<p>Inside was a working smartphone capable of performing most of the functions that smartphones do. In that sense it is not a \u201cfake\u201d phone, but after using it, giving it to an independent cybersecurity company to probe, and disassembling it, it became clear that it wasn&#8217;t, as the box says, \u201cDesigned by Apple in California.\u201d<\/p>\n<p><strong>The Phone<\/strong><\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958619119-IMG_3787.jpeg\"\/><\/p>\n<p>Image: Jason Koebler<\/p>\n<\/div>\n<p>The phone looks like an iPhone X. It has the same form factor, most of the same detailing, no home button, the same volume rockers and side buttons, a working Lightning port, and the same speaker holes on the bottom of the phone. It also has pentalobe screws on the bottom of the device, just like an iPhone. It even comes with an instruction manual telling you how to set up Face ID. I looked up the IMEI number\u2014essentially a serial number given to every smartphone\u2014listed on the back of the box, and it corresponds to an iPhone X, though I have no way of telling whose.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958830623-Screenshot_20180717-205553.png\"\/>\n<\/div>\n<p>When turning the phone on, the Apple logo shows up, and it boots to something that looks very much like iOS. It has the same default lock screen that the iPhone launches with, and you can launch the camera or flashlight from it. It uses the same logos, appears to have the same default apps, and generally seems as though you are using an iPhone.<\/p>\n<p>It quickly became clear this isn\u2019t iOS, though. For one, the sensor bar at the top that creates the dreaded \u201cnotch\u201d doesn\u2019t exist on this phone. Instead, the notch has been lovingly recreated in software. The device feels sluggish and underpowered while switching apps. The camera is clearly kinda blurry.<\/p>\n<p>But still, if the phone isn\u2019t an iPhone, it isn\u2019t obvious what it actually <em>is<\/em>. Many of the apps look identical to their iOS versions. The calculator and stocks apps are seemingly identical to those in iOS. The camera menus and interface look the exact same as the one in iOS. The settings menu looks close-to-identical and has many of the same settings you\u2019d find on an iPhone. The Mail app is the best approximation; I don\u2019t use the default Mail app on my own iPhone, but the setup process and functionality seem from an end-user point-of-view as basically the same as the real thing.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958677746-3869292891552620616-1.jpeg\"\/><\/p>\n<p>Image: Jason Koebler<\/p>\n<\/div>\n<p>Once I started trying some of Apple\u2019s more recent and advanced features, though, things started going off the rails. Siri\u2019s graphical interface has been recreated, but it doesn\u2019t really work. My favorite thing about the phone is its \u201cFace ID\u201d system. I clicked over to Face ID in the settings menu, clicked \u201cAdd a Face ID,\u201d and was hilariously bounced over to the camera, which did manage to draw a green box around my face. It said \u201cFace Added,\u201d and closed. I was then able to unlock the phone with my face. So was literally anyone else who put their face in front of the phone.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958855254-Screenshot_20180717-212333.png\"\/>\n<\/div>\n<p>Clicking around further betrayed the phone\u2019s actual software: the keyboard is clearly an Android keyboard; when the reskinned App Store crashed, I got a popup notifying me that the \u201cGoogle Play Store\u201d had malfunctioned. The \u201cWeather\u201d app is just Yahoo! Weather. The Health App is a third party thing that asked me to click cartoon avatars selecting whether I was a \u201cboy or girl.\u201d The \u201cPodcasts\u201d app just opens YouTube. Apple Maps opens Google Maps.<\/p>\n<p>The phone, then, is a device that looks just like an iPhone but is actually an Android that has been reskinned from top-to-bottom to seem as close to an iPhone as is possible.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958893580-Screenshot_20180717-213328.png\"\/>\n<\/div>\n<p>I was unfortunately unable to get the phone to connect to an American cellular network on a throwaway SIM card, but I did connect the phone to a few public Wi-Fi networks to approximate daily use (I also didn\u2019t login to any of my own accounts, and didn\u2019t connect it to any of the normal Wi-Fi networks for reasons that\u2019ll become clear in a moment.) It felt largely like using a phone that was maybe a few years old, with buggy software that nonetheless mostly worked. I was able to send emails from throwaway accounts, browse the internet, take photos and screenshots, and generally complete tasks with the phone.<\/p>\n<p><strong>Probing the phone<\/strong><\/p>\n<p>One day after work, Motherboard security reporter Lorenzo Franceschi-Bicchierai and I took the phone to Trail of Bits, a security research and consulting firm in New York City, to try to figure out exactly what was running under the hood of what\u2014at first glance\u2014looks like a real iPhone running real iOS.<\/p>\n<p>The researchers were initially wowed with the device, and were surprised that it used a Lightning port and a software notch. They assumed that the device was likely insecure, and kept it in a faraday bag, which blocks all incoming and outgoing wireless signals, to keep it from potentially causing any trouble at their office. A few weeks later, Trail of Bits researcher Chris Evans wrote up an initial security report for us.<\/p>\n<p>According to Evans, the phone runs a version of Android with a patchwork of code taken from several different sources. The phone is also loaded with backdoors and malicious apps.<\/p>\n<p>\u201cIf it isn\u2019t outright malicious its overall security is pretty much non-existent,\u201d Evans told us.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958920594-Screenshot_20180717-213419.png\"\/>\n<\/div>\n<p>The apps, which appear to come from several different online sources, is where it \u201cgets really bad,\u201d as Evans put it in the report shared with Motherboard. Security features such as permissions, regulation, or sandboxing (which keep a vulnerability in one app from affecting other parts of the phone) are \u201calmost non-existent.\u201d<\/p>\n<p>Several of the stock fake Apple apps such as Compass, Stocks, Clock ask for \u201cinvasive permissions,\u201d such as reading text messages. It\u2019s unclear if this is a sign that the developers were mediocre or malicious, Evans wrote.<\/p>\n<p>\u201cThe mismash of default apps preinstalled on the phone I was given are horribly insecure (if not outright malware),\u201d Evans said.<\/p>\n<p>Evans also found \u201cplenty of evidence\u201d of a \u201cwide range of backdoors,\u201d perhaps written by several developers. The fake Safari app uses custom libraries that open a backdoor and allow hackers to run code on the phone remotely. Last year, Google <a href=\"https:\/\/arstechnica.com\/information-technology\/2017\/08\/500-google-play-apps-with-100-million-downloads-had-spyware-backdoor\/\" target=\"_blank\">removed 500 apps that had more than 100 million downloads combined<\/a> from the Play Store because they included one of those libraries.<\/p>\n<p>The fake iPhone also includes two more potential backdoors. One is the notorious ADUPS, a service made by a Chinese company that provides over-the-air firmware updates that is <a href=\"https:\/\/arstechnica.com\/information-technology\/2016\/11\/chinese-company-installed-secret-backdoor-on-hundreds-of-thousands-of-phones\/\" target=\"_blank\">widely<\/a> <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/chinese-backdoor-still-active-on-many-android-devices\/\" target=\"_blank\">considered<\/a> to be a backdoor. The other is an app called LovelyFont that looks like an \u201cinvasive backdoor\u201d that has almost all permissions and potentially leaks data, such as the phone\u2019s IMEI, MAC, and serial number, to a remote server, according to Evans.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531958949720-Screenshot_20180717-213149.png\"\/><\/p>\n<p>Training &#8220;Face ID&#8221;<\/p>\n<\/div>\n<p>To make matters worse, the phone logs the iCloud username and password in a database that\u2019s broadcast to the whole system and can be read by any service and application, according to Evans (this means that if you happen to find yourself in possession of one of these, you should <em>definitely<\/em> not login to iCloud on it.)<\/p>\n<p>Interestingly, there was an attempt to make \u201cSiri\u201d work properly: It \u201cseems to be a legitimate, albeit poor attempt at integrating a voice application launcher,\u201d Evans wrote; all queries sent through \u201cSiri\u201d are routed through a Chinese voice command library called iFlyTek, and weather checking and translation are sent to a Baidu server.<\/p>\n<p>The phone\u2019s hardware specs are less scary, but still somewhat shady. The phone\u2019s system-on-chip is the <a href=\"https:\/\/www.mediatek.com\/products\/smartphones\/mt6580\" target=\"_blank\">MT6580<\/a>, \u201cone of many in a line of incredibly cheap boards that are a mainstay in Chinese Android phones,\u201d made by Taiwanese firm Mediatek, he wrote. Its operating system is based on Android 6 Marshmallow, which was originally released in 2015, with a modified kernel source, according to Evans\u2019s report. The phone\u2019s firmware was created using a software platform called \u201cChinese Miracle 2\u201d that is widely available.<\/p>\n<div class=\"article__media\" readability=\"7\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531959035466-Screen-Shot-2018-07-18-at-81005-PM.png\"\/><\/p>\n<p>Examples of code loading remote extensions and managing downloads.<\/p>\n<\/div>\n<p>Evans was also able to explain why the phone\u2019s software looks so much like iOS. When the phone boots for the first time, a custom app mimics iOS onboarding, adapting it to Android\u2019s settings. The Settings app looks like an iPhone Settings app but it\u2019s also written to apply to Android system options, and when there\u2019s no equivalent, it just does nothing. To complete the faux iOS look, the phone uses a custom launcher that mimics iOS instead of the stock Android launcher.<\/p>\n<p>It was hard for Evans to figure out exactly who actually developed the phone, and he warned us that the evidence he found is inconclusive. The developer is almost definitely Chinese, according to Evans. But where they got the code is less clear. Evans found that the firmware appears to have been downloaded from forums where where members share ROM clones and tools.<\/p>\n<p>In any case, while the phone is undoubtedly quite cool, Evans came to the conclusion: \u201cI wouldn\u2019t use this phone if I valued my privacy\/passwords\/information, etc.\u201d<\/p>\n<p><strong>What\u2019s Inside<\/strong><\/p>\n<p>When the iPhone X launched, I was with iFixit to look at what was inside it. So naturally I had to open this thing up, knowing that I\u2019d probably break it in the process because I didn\u2019t have any sense of how it was put together in the first place.<\/p>\n<p>Like any other iPhone, the device has two pentalobe screws next to the Lightning port. I grabbed my screwdriver and started unscrewing them. And they didn\u2019t go anywhere, or come loose. I shoved some tweezers in there and pried them out. It turns out they weren\u2019t screws at all. Instead, they were little bolts (no threads) that didn\u2019t actually do anything and were just for show.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531959112085-5056281641911935249.jpeg\"\/>\n<\/div>\n<p>I attached a suction cup to the screen and started pulling, and began unclipping the plastic clips that held the screen on. The device opened horizontally rather than vertically, just like recent iPhone models (and unlike, say, the iPhone 5S, which opens from the bottom.)<\/p>\n<p>The interior layout is similar to the iPhone X, in that the battery takes up the bulk of the left side of the device, the charging port is at the bottom, and the \u201clogic board,\u201d or whatever you\u2019d like to call it in this case, is on the right side of the device. The similarities pretty much end there.<\/p>\n<div class=\"article__media\" readability=\"7\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531959219436-IMG_7745.jpeg\"\/><\/p>\n<p>The last few moments of this phone&#8217;s life.<\/p>\n<\/div>\n<p>When we tore down the iPhone X, iFixit CEO Kyle Wiens called it \u201cthe pinnacle of electronic engineering.\u201d<\/p>\n<p>\u201cIt\u2019s the most thought out, carefully designed product in the history of the world,\u201d he said, referring to the hundreds of thousands (if not millions) of work hours and millimeter-precise design choices made by Apple that went into the device.<\/p>\n<div class=\"article__media\" readability=\"7\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531959269686-NVwTUohZkJOX1Hii.jpeg\"\/><\/p>\n<p>This is the inside of a real iPhone X. Image: iFixit<\/p>\n<\/div>\n<p>This phone is clearly not that.<\/p>\n<p>\u201cThere\u2019s a lot more space in the layout,\u201d iFixit\u2019s Adam O\u2019Camb told me. \u201cOn the iPhone X, everything is very packed together. On this, space is used superficially on the board.\u201d<\/p>\n<div class=\"article__media\" readability=\"7\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531959304546-4019072976606462793.jpeg\"\/><\/p>\n<p>This is the inside of the phone we bought.<\/p>\n<\/div>\n<p>There\u2019s lots of plastic that seems to be included to take up space so that the interior components won\u2019t shift; there\u2019s clearly no Haptic Engine or Face ID sensor bar (though there are, of course, cameras.) The battery looks like a standard smartphone battery rather than the dual cell battery that\u2019s in the iPhone X, and the logic board looks like a plug-and-play from something else. Even to my relatively untrained eyes, the chips on it are much larger, indicating that they\u2019re older and probably much less expensive than what\u2019s used in the iPhone X (considering that we could have bought 10 of these for the price of one iPhone X, that makes sense.)<\/p>\n<p>\u201cIt\u2019s clearly a couple generations behind, as well as having a little bit of a dumbed-down front sensor and obviously not the same face-recognition software,\u201d O\u2019Camb said. It also doesn\u2019t have an OLED display.<\/p>\n<div class=\"article__media\"><img decoding=\"async\" src=\"https:\/\/vice-web-statics-cdn.vice.com\/images\/blank.png\" alt=\"\" class=\"col-12-xs\" data-src=\"https:\/\/video-images.vice.com\/_uncategorized\/1531959435446-5379551905615455238.jpeg\"\/><\/p>\n<p>Rivets, everywhere!<\/p>\n<\/div>\n<p>Most interesting, though, is how the phone appears to be assembled. It\u2019s filled with metal brackets, as well as a shield that holds the battery in. Apple gets a lot of shit for gluing down its battery (making it difficult to replace), but this metal shield is definitely worse. That\u2019s because I only found one single screw in the entire phone. The rest of the phone\u2019s components are secured with metal rivets that are punched together, which effectively make the phone disposable. Replacing the battery would mean destroying the phone entirely, and disassembling this thing would basically require me to cut through metal or crack it in half.<\/p>\n<p>\u201cRivets are bad for repair because they make it more difficult to take apart and then you can\u2019t really replace them,\u201d O\u2019Camb said. \u201cThe reasoning behind their use is because it\u2019s just cheaper. Using a rivet gun is cheaper and faster than screwing everything together.\u201d O\u2019Camb added that rivets have a bit more margin for error than screws\u2014if a screw is misplaced on an iPhone, it could destroy the phone (this is often called \u201clong screw damage\u201d when a user botches a repair and tries to screw the wrong screw into a hole.) If a rivet is off by a few millimeters, it\u2019ll still hold tight.<\/p>\n<p>Internally, then, the device seems to contain a handful of old smartphone components that are assembled in a layout somewhat similar to that of the iPhone and fastened together as cheaply and quickly as possible. While I did break the phone while I was disassembling it (the screen was also riveted on in a few spots), I was unwilling to cut through the metal to see underneath the shield, primarily because I didn\u2019t want to start a fire in the VICE office by puncturing the battery.<\/p>\n<p><strong>Should you buy it?<\/strong><\/p>\n<p>I would not necessarily recommend using this phone as your daily driver. But it is by far the most interesting piece of technology I\u2019ve come across this year.<\/p>\n<p>As Sarah Emerson reported earlier this year, the line between counterfeit and authentic is often muddled; <em>Shanzhai<\/em> electronics once referred exclusively to the counterfeit market, it now refers to original inventions, cloned electronics, hybrid devices, and so-on. Sarah said that she didn\u2019t see many of these devices for sale in the electronics markets she went to: \u201cMostly, people were selling not-obviously-fake ones for roughly the same price as market value,\u201d she told me. \u201cIt\u2019s possible those versions were also reassembled, or swiped from delivery trucks in places like Hong Kong before making it to Shenzhen.\u201d<\/p>\n<p>Apple would certainly call this phone \u201ccounterfeit,\u201d and it quite egregiously uses lots of Apple\u2019s trademarks and copyrights. But that doesn\u2019t mean it\u2019s worthless or not an interesting engineering or manufacturing feat. It\u2019s a functioning smartphone and would certainly fool a bystander if you happened to be using it that costs 10 times less than the original; it\u2019s also the only Android phone I\u2019ve ever seen that charges and connects to computers using Apple\u2019s Lightning port. In that sense, it actually is a hybrid between an iPhone and an Android.<\/p>\n<p>It\u2019s hard to say where this device fits in in Apple\u2019s aggressive war on independent repair and third party replacement parts. It\u2019s clear that factories in China besides Foxconn can make high quality electronics, and many of them can and do make parts that are compatible with and sometimes interchangeable with the iPhones that Apple sells. Aside from the Lightning port, this phone doesn\u2019t use any parts that would be compatible with an original iPhone, from what I can tell.<\/p>\n<p>If you buy an iPhone from Apple and replace the screen with a third-party one from China, does that make your device a counterfeit? What if you assemble an iPhone entirely out of aftermarket, recycled, or reused parts? The answers to those questions are incredibly important not just for people involved in the repair industry or people who want to fix their own devices, but it\u2019s integral to our understanding of who our devices actually belong to. So maybe this phone isn\u2019t Apple\u2019s iPhone X, but it is <em>an<\/em> iPhone X.<\/p>\n<p><strong><em>Solve Motherboard\u2019s weekly, internet-themed crossword puzzle: <a href=\"https:\/\/motherboard.vice.com\/en_us\/topic\/solve-the-internet\" target=\"_blank\">Solve the Internet<\/a>.<\/em><\/strong><\/p>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/29151\/Security-Review-A-Counterfeit-100-iPhone-X.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":6850,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[2155],"class_list":["post-6849","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinemalwarephonechinafraudapple"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security Review: A Counterfeit, $100 iPhone X 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Review: A Counterfeit, $100 iPhone X 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-07-19T14:27:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/security-review-a-counterfeit-100-iphone-x.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"16\" \/>\n\t<meta property=\"og:image:height\" content=\"9\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Security Review: A Counterfeit, $100 iPhone X\",\"datePublished\":\"2018-07-19T14:27:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/\"},\"wordCount\":2938,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/security-review-a-counterfeit-100-iphone-x.jpg\",\"keywords\":[\"headline,malware,phone,china,fraud,apple\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/\",\"name\":\"Security Review: A Counterfeit, $100 iPhone X 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/security-review-a-counterfeit-100-iphone-x.jpg\",\"datePublished\":\"2018-07-19T14:27:47+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/security-review-a-counterfeit-100-iphone-x.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/security-review-a-counterfeit-100-iphone-x.jpg\",\"width\":16,\"height\":9},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/security-review-a-counterfeit-100-iphone-x\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,malware,phone,china,fraud,apple\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinemalwarephonechinafraudapple\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security Review: A Counterfeit, $100 iPhone X\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Review: A Counterfeit, $100 iPhone X 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/","og_locale":"en_US","og_type":"article","og_title":"Security Review: A Counterfeit, $100 iPhone X 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-07-19T14:27:47+00:00","og_image":[{"width":16,"height":9,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/security-review-a-counterfeit-100-iphone-x.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Security Review: A Counterfeit, $100 iPhone X","datePublished":"2018-07-19T14:27:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/"},"wordCount":2938,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/security-review-a-counterfeit-100-iphone-x.jpg","keywords":["headline,malware,phone,china,fraud,apple"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/","url":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/","name":"Security Review: A Counterfeit, $100 iPhone X 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/security-review-a-counterfeit-100-iphone-x.jpg","datePublished":"2018-07-19T14:27:47+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/security-review-a-counterfeit-100-iphone-x.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/security-review-a-counterfeit-100-iphone-x.jpg","width":16,"height":9},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/security-review-a-counterfeit-100-iphone-x\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,malware,phone,china,fraud,apple","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinemalwarephonechinafraudapple\/"},{"@type":"ListItem","position":3,"name":"Security Review: A Counterfeit, $100 iPhone X"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/6849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=6849"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/6849\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/6850"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=6849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=6849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=6849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}