Apple’s iMessage has built-in protection against phishing attacks but hackers have discovered a simple trick to disable it.