Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Scamming - Fraud
The fake email message below which claims that the recipients' Apple IDs were used to sign into a new web browser is a phishing scam. The fake email has links in it that go to a phishing Apple website which steals account usernames and password. The phishing website steals account credentials by asking visitors to sign-in with their Apple account usernames and passwords. Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.
From: "ApplelD Support" <qowtmani@qowtmanik.sasaswlokkkkidiotrojajancok.icloud.com>Date: December 7, 2017 at 9:19:49 AM ESTTo: baileyj_2000@yahoo.comSubject: Your Apple ID was used to sign in to a new browser SeaMonkey (Macintosh)Your Apple ID was used to sign in to a new browserYour Apple lD (baileyj_2000@yahoo.com) was used to sign in to iCloud on a new browserDate and Time: 12/7/2017 2:19:49 PM UTCBrowser: SeaMonkeyOperating System: MacintoshIf you have not recently signed in to an iPad mini with your Apple ID and believe someone may have accessed your account, go to Apple ID and change your password as soon as possible.Login to Аpрle lDSincerely,Аpрle Support
From: "ApplelD Support" <qowtmani@qowtmanik.sasaswlokkkkidiotrojajancok.icloud.com>
Date: December 7, 2017 at 9:19:49 AM EST
To: baileyj_2000@yahoo.com
Subject: Your Apple ID was used to sign in to a new browser SeaMonkey (Macintosh)
Your Apple ID was used to sign in to a new browser
Your Apple lD (baileyj_2000@yahoo.com) was used to sign in to iCloud on a new browser
Date and Time: 12/7/2017 2:19:49 PM UTC
Browser: SeaMonkey
Operating System: Macintosh
If you have not recently signed in to an iPad mini with your Apple ID and believe someone may have accessed your account, go to Apple ID and change your password as soon as possible.
Login to Аpрle lD
Sincerely,
Аpрle Support
Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.
6
They are using email address: verify-account-appleid921111@wadagav.com
Here is another scam: "Von: ID AppIe Datum: 22. März 2019 um 10:22:33 MEZ An: marika.kis@icloud.com Betreff: [AON] Your Account has been temporarily disabled for security reasons! Dear Customer, Your Apple ID was used to sign in to a new web browser. Date and Time : March 22, 2019 IP Address : 134.90.149.150 Country : Denmark Your Apple ID has been temporarily disabled for security reason. When you see this alerts, you can go to iforgot.apple.com to unlock your account with your existing password. Your account will permanently disabled if you do not verify your account under 24 hours. Sincerely, Apple Support"
Received scam from: -Original Message- From: Apple <1G3Lrd-nNgHIMCQrctj.WvzApn@6464-JhzPKo.1g3lrdh.loHWkqbEjKArZ.dkcstore.me> Sent: Mon, Mar 4, 2019 2:11 pm Subject: Your Apple ID was used to sign in via a web browser fгоm Russian Federation 189.115.197.133
Here is another scam:"There was suspicious activity in your Apple ID.Login Details:Date : 17 September 2018Browser : Mozilla FirefoxOperating system : LinuxCountry : MadagascarYour account will be protected until you confirm this message within 24 hours.If we do not receive the information by the deadline, you can permanently lock access to your account. Please click the LOGIN button to verify your account."
ANOTHER ONE:"Från: "service@apple.com" Ämne: Alert • Your Apple ID was used to sign in to a new browser. REF #Q80458-N32212-K22971!Datum: 3 mars 2018 01:52:25 CETTill: Svara till: "service@apple.com" DearYour Apple ID was used to sign in to iCloud via a web browser. Date and Time: 02-03-2018Browser: FireFox IP: 109.1.188.99 (Indonesian, Denpasar) Operating System: Mandrake Linux 32-bit If the information above looks familiar, you can disregard this email. If you have not signed in to iCloud recently and believe someone may have accessed your account, go to Apple ID (https://appleid.apple.com) and change your password as soon as possible Click here to Verify your ID Sincerely, Apple Support Apple ID Support Privacy PolicyCopyright @ 2017 Apple Distribution International, All rights reserved."
Here is another scam: - - - - From: "lTunes Activity" Date: February 13, 2018 at 1:11:49 PM EST Subject: New Login to your iCloud from Macintosh Browser Your Apple lD () was used to sign in to iCloud on a new browser Date and Time: 13 February, 2018, 4:25 AM UTC Browser: Safari Operating System: Macintosh If you have not recently signed in to an iPad mini with your Apple ID and believe someone may have accessed your account, go to Apple ID and change your password as soon as possible. Login to Аpрle lD Sincerely, Аpрle Support
