Apple users, be aware of fake email messages like the one below, which claim that someone tried to log in to their Apple accounts and your accounts have been locked for security reason. The fake email messages are phishing scams being sent by cybercriminals to trick their potential victims into clicking on the link in the email messages, which go to fake Apple websites that steal account credentials. Once the cybercriminals have gotten their potential victims' credentials, they will attempt to gain access their accounts and use them fraudulently.
Therefore, Apple users who have already been tricked by the phishing scam are asked to change their passwords and check their accounts thoroughly for any discrepancies. And, for those whose accounts have already been hijacked, are asked to contact Apple for help.
A Sample of the "Apple Someone Tried to Login to your Apple ID" Phishing Scam
From: AppleID <not-reply@notification.icloudupport-suspicious-email-access-account-lockedd1902789890002webappsemailmail.account.live.mail.com>
Date: September 11, 2017 at 12:23:34 PM EDT
Subject: Re : [ Summary User Control ] Alert- Review Statement NEW LOGIN FROM CHROME ON 10 SEPT 2017
Customer ServiceAPPLE ID
Dear Customer,
You received this message because this email (email removed) is listed as the Apple ID. If this is not your Apple ID, you can change it on account setting.
Someone tried to login to you Apple ID. We stopped this login attempt, but we take additional action that we locked your account for security reason. Please signin and complete security step to recover your account.
Details :
Date & Time : Sunday, September 10, 2017 7:45 PM (GMT)
Location : Madrid, Spain
Operating System : Red Hat Enterprise Linux Server release 5.6 (Tikanga)
For Additional information
If you believe an someone has accessed your account, you can use the link below to return to your previous security settings
LOGIN NOW
Sincerely,
Apple
Copyright © 2017 Apple Inc all rights reserved.
Apple users should never click on a link, especially in email messages, to sign into their accounts. If they have received similar email messages like the one above, they should always go directly to https://appleid.apple.com/ and sign into their accounts from there. If there is something wrong with their accounts or they need to do something to their accounts, they will be notified after signing in.