---
title: "Claude Opus 5.5 + REA가 내 iPhone에서 '영구 삭제'한 모든 사진을 찾아냈다."
url: "https://reamcp.dev/ko/cases/claude-opus-5-5-rea-found-every-photo-i-permanently-deleted--42b42b"
source: "https://x.com/i/status/2114061218352615609"
source_type: "x"
author: "Deni"
author_handle: "0xDeniAi"
stars: 0
category: "보안 및 악성코드 분석(방어)"
categories: ["security-defense"]
tags: ["appdata", "claude-code", "iphone-backups", "privacy-audit", "static-analysis", "windows"]
added: "2026-10-25T02:04:44.736Z"
updated: "2026-10-24T18:27:26.000Z"
locale: "ko"
content_locale: "ko"
---

# Claude Opus 5.5 + REA가 내 iPhone에서 '영구 삭제'한 모든 사진을 찾아냈다.

한 사용자가 자신의 iPhone과 노트북을 감사하고, Claude Code를 통해 REA(Reverse Engineer Anything)를 사용해 설치된 프로그램 5개를 뜯어보고 어떤 프로그램이 숨겨진 AppData\MobileSync iPhone 백업 폴더를 읽는지 확인한 뒤 구체적인 강화 단계를 나열한다.

## Description

이 글은 개인 정보 보호/보안 점검을 설명한다. 암호화되지 않은 iPhone 백업이 AppData 아래 숨겨진 MobileSync\Backup 폴더에서 발견되었고, iMessage, WhatsApp, Telegram 채팅 안에 보관된 사진도 함께 발견되었다. 작성자는 그런 다음 REA('npx rea-agents setup')를 설치하고 Claude에게 거의 사용하지 않는 프로그램 5개(‘PC 청소 프로그램’ 2개, 동영상 변환기, 오래된 VPN, 게임 런처)를 분석하게 하여 각 프로그램이 실제로 디스크에서 무엇을 읽는지 알아냈으며, 한 청소 프로그램이 MobileSync를 포함한 전체 AppData 트리를 순회한다는 사실을 발견했다. 글은 정리 체크리스트(오래된 백업 삭제, 'Encrypt local backup' 활성화, 사용하지 않는 프로그램 제거, 사진 보관함 권한 제한, 채팅 첨부 파일 지우기)와 사용된 그대로의 프롬프트로 끝나며, 이를 작성자 자신의 컴퓨터에서 REA를 사용하는 재현 가능한 방어 보안 사용 사례로 만든다.

## Original README

Claude Opus 5.5 + REA found every photo I "permanently deleted" from my iPhone. they were hidden on my phone and my laptop the whole time.

i plugged my iPhone into my laptop to run a backup and asked Claude Code to do a quick security check while it ran. it came back with something i wasn't looking for at all.

first, the phone. every photo i had ever sent in iMessage, WhatsApp and Telegram was still there, hidden inside the chats. it doesn't show up in your gallery, so you think it's gone. i deleted those photos from my camera roll years ago. the copies in the conversations never went anywhere, and some of my chats go back to 2020.

then the laptop. a hidden folder inside AppData called MobileSync\Backup. Windows hides AppData by default, so i had never seen it. inside were five old iPhone backups, the oldest from 2021, none of them encrypted. each one is a full copy of my camera roll on the day i made it. so every photo i deleted after that day was still sitting there, sorted by date.

here's what Claude pulled out:

a photo of my passport from a 2023 visa application
screenshots of my bank app with the full account number visible
private photos i sent someone and deleted right after the breakup
a screenshot of my crypto seed phrase i took "just for a minute" in 2022
a photo of my ID and card that i took to remember the numbers and deleted 5 seconds later
screenshots of my ex's private stories i saved in 2023

183,406 files in total, a lot of them full resolution.

then i asked it to keep going. in about 4 minutes it gave me a full report: every backup with its date, size and how many photos and videos were inside, which ones were unencrypted, and a list of every program on my laptop i hadn't opened in over 6 months.

that list was the scary part. just because you can't see a folder doesn't mean programs can't. any program running on the laptop can open an unencrypted backup, and i had two "PC cleaners", a free video converter, an old VPN and a game launcher i don't remember installing.

so i plugged REA (Reverse Engineer Anything) into Claude Code and had it take those 5 programs apart. it showed me what each one actually reads on disk. one of the "PC cleaners" walks through the whole AppData folder on every launch, MobileSync included. that means it had access to every one of those backups for 2 years.

and on the phone, 23 apps had Full Access to my photo library, meaning every photo, not just the ones i choose. weather apps, a QR scanner, a flashlight app from 2022.

what i did, about 5 minutes total:

1. open iTunes or the Apple Devices app → your iPhone → Manage Backups → delete the old ones
2. tick "Encrypt local backup" so the next one is locked with a password
3. uninstall everything on Claude's "not opened in 6 months" list, starting with anything REA caught reading AppData
4. iPhone: Settings → Privacy & Security → Photos → move apps from Full Access to Limited or None
5. iPhone: Settings → General → iPhone Storage → Messages → Review Large Attachments, and clear the photos you don't want kept
6. go through old chats in WhatsApp and Telegram too, their media stays even after you delete it from the gallery

here's how to run the same check yourself.

for Claude Code:

"find every iPhone backup on this computer, including hidden folders like AppData. for each one tell me the date, the size, how many photos and videos are inside, and whether it's encrypted. then list every installed program i haven't opened in the last 6 months. don't delete or change anything, just give me the report."

for REA, install it with npx rea-agents setup, then ask Claude:

"use REA to analyze every program on that list. tell me which ones read files inside AppData, and whether any of them touch the MobileSync folder."

i went from 23 apps with full access to my photos to 3. send this to anyone who's ever plugged their iPhone into a laptop.