Snatcher: Apple Find My Network Exposes Your Lost Devices To Strangers
This work exposes critical privacy and security flaws in Apple's Find My network for users of nearly one billion devices, highlighting a conflict between privacy, anti-stalking, and physical security.
The paper reveals that Apple's Find My network has security vulnerabilities allowing unauthorized discovery and physical theft of lost devices, and presents Snatcher, an Android-based attack framework that successfully tracks and locates Apple devices in real-world tests.
Apple's Find My network connects nearly one billion devices to locate missing property via Bluetooth Low Energy (BLE). This paper reveals that insecure BLE advertisements and design tradeoffs allow unauthorized discovery and physical theft of lost Apple devices. We develop Snatcher, an attack and analysis framework implemented fully on Android smartphones without specialized hardware. Snatcher identifies vulnerabilities in unencrypted BLE advertisements, unauthenticated acoustic triggers, and slow MAC address randomization. Through three levels - sound-based direction finding, RSSI-IMU sensor-fusion navigation, and spatial-temporal clustering - our Android-based platform physically tracks and locates lost Apple accessories and devices in real-world tests. Our results highlight a crucial conflict between privacy protection, anti-stalking design, and physical security, urging Apple to strengthen Find My defenses.