Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.
The "Apple Invoice Review Your Order History from Other Device" Phishing Scam
Subject: Review your order history from other device
From: Order Confirmation <order-cs-appstore0053@submailersystem .live>
Attachment: AppIe-Invoice lD1496870944TS.pdf (133 KB)
Two-factor authentication has been activated, someone has abused your account, your AppIe lD has been Iocked for security reasons, we have sent the attachment AppIe-receipt#10624 (PDF) for detail full payment information
Please cIick or download and CANCEL THIS PAYMENT
Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.