The email message below, which claims that the recipients' Apple ID was used to login from an unknown device and browser, is a phishing scam. The phishing email message is being sent by cybercriminals to trick Apple users into clicking on the link in it. The link in the email message goes to a fake Apple website that will ask visitors to sign-in. Once visitors attempt to sign into the fake website with their Apple user names and passwords, the same information will be sent to the cybercriminals behind the phishing scam.
The Phishing Apple Email Message
From: noreply-coustumerserviceidapple248467356@live.co.uk
Sent: 8/20/2017 5:50:19 P.M. Central Daylight Time
Subj: Reminder : your Apple ID was used to login from an unknown Device and browser!
Dear Client,
We detected that someone logged into your Apple ID from an unknowndevice andbrowser.
Thatswhy as asecuritymeasurewehave toblockyour Apple ID to keepyousafefromunauthorisedactivities.
Wasthatyou?
-Service- Device : Mozilla/5.0 (Macintoshs; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
-Service- IP : 114.11.37.48
-Service- Location : Ind -Service-vice- ia.
-Service- if-Service- not-Service- please-Service- review-Service- this-Service- activity-Service- as-Service- soonas-Service- possibleby-Service- completingsome-Service- detailsto-Service- restorefull-Service- access-Service- to-Service- your-Service- account.
https://www.apple.com/accont?token=8fa6a6casd1342c23423-Service- 47620ae02fdaa555&dispatch=havwh6f8tyrg
Your account will be locked if we didn't receive any response from you in more than twenty four hours.
Sincerely,
Apple Support
Once the cybercriminals have received the stolen Apple usernames and passwords, they will use it to hijack their potential victims’ Apple accounts and use them fraudulently. Therefore, Apple users who have been tricked by the phishing scam are asked to change their Apple accounts' password, check their accounts for discrepancies and contact Apple for help if any is found.
This is another reason why Apple users should never click on links in email or other messages to sign into their accounts, they should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something that needs to be done their accounts, they will be notified after signing in.