WE EXPECTED trouble of some sort with Apple’s AirTag. The button-sized tracker lends itself to misuse, but we didn’t see this one coming. Security researcher Bobby Rauch has uncovered something nasty. If you lose your AirTag, you can activate Lost Mode, which creates a unique address on the Apple servers with a message and contact details. If your lost tag is picked up by a compatible device, you might get a call, and your AirTag back. That’s the idea, but the phone number field isn’t protected and can be filled with a malicious script instead of plain numbers. This can be used to redirect you anywhere, for example to a spoof iCloud login, where your details can be stolen. A strategically placed AirTag could now become a trap for the unwary.