Setting it to Lost Mode generates a unique URL at, and allows the user to enter a personal message and contact phone number. The AirTag’s “Lost Mode” lets users alert Apple when an AirTag is missing. But according to new research, this same feature can be abused to redirect the Good Samaritan to an iCloud phishing page - or to any other malicious website. The new $30 AirTag tracking device from Apple has a feature that allows anyone who finds one of these tiny location beacons to scan it with a mobile phone and discover its owner’s phone number if the AirTag has been set to lost mode.
