Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Scamming - Fraud
The email message below which claims that the recipients' Apple IDs have been used to make purchases on iTunes, is another attempt by cybercriminals to steal their potential victims’ Apple account credentials. The fake email, which also claims that some activities on the recipients' Apple ID were found that violated Apple's terms and conditions, but that is just another trick to frighten the recipients into clicking on the links in the fake email message. The links in it that go to a phishing Apple website which steals account usernames and password. The phishing website steals account credentials by asking visitors to sign-in with their Apple account usernames and passwords. Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.
From: "mail-transaction@5548l-apple.info" <mail@orange.net>Date: September 13, 2017 at 3:45:25 PM EDTSubject: Review : Your Apple ID used for purchase on iTunes. Transactions IDNotification AccountThis e-mail has been send to you, because, we found that some of the activities from your Apple ID are violating the terms and conditions of your agreement with us.Apple ID :Login Details:Browser : Chrome BrowserIp Address : 177.142.204.252Date and Time: 9/13/2017 , 12:45:25 PMCountry : BoliviaPurchase Details:Order No : #2EDTJ5ZItem : The Magic Whip (Album)Price : $49.99We detected unusual purchase from your Apple ID. For this we disabled your Apple ID because your Apple ID was Login from different country and used for buy song on iTunes. If it is not your purchase, please do claim refund for purchase above by verifying your accountWhat to do next:Log in to your Apple ID and provide the requested information. We'll receive and review your informations for your refunded.If the information above looks familiar, you can disregard this email.Log InCopyright © 2017 Apple Inc. All rights reserved.
From: "mail-transaction@5548l-apple.info" <mail@orange.net>
Date: September 13, 2017 at 3:45:25 PM EDT
Subject: Review : Your Apple ID used for purchase on iTunes. Transactions ID
Notification Account
This e-mail has been send to you, because, we found that some of the activities from your Apple ID are violating the terms and conditions of your agreement with us.
Apple ID :
Login Details:
Browser : Chrome Browser
Ip Address : 177.142.204.252
Date and Time: 9/13/2017 , 12:45:25 PM
Country : Bolivia
Purchase Details:
Order No : #2EDTJ5Z
Item : The Magic Whip (Album)
Price : $49.99
We detected unusual purchase from your Apple ID. For this we disabled your Apple ID because your Apple ID was Login from different country and used for buy song on iTunes. If it is not your purchase, please do claim refund for purchase above by verifying your account
What to do next:
Log in to your Apple ID and provide the requested information. We'll receive and review your informations for your refunded.
If the information above looks familiar, you can disregard this email.
Log In
Copyright © 2017 Apple Inc. All rights reserved.
Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.
1
Here is another scam:"Dear ClientYour Apple ID was just used to sign in to iCloud on an iPhone 7 Plus named "Janna R Colson" and make a Purchases via iTunes Store,Order ID : MQXWH9B2BT Date and Time: December 17, 2017, 10:09 PM PDT ( Indonesia Time )OS: (iPhone; CPU iPhone OS 10_3_2 like Mac OS X)Location： Jakarta, IndonesiaYou're getting this email to make sure it was you, If you did not authorize this transaction please cancel your transaction by clicking link in the below :CANCEL NOWYou're getting this email to make sure it was you, Apple needs to do this to comply with regulatory requirementsThank's AppIe SupportApple ID Summary • Terms of Sale • Privacy Policy© Copyright © 2017 Apple Inc Privacy Policy Terms of Service Terms of Sale Feedback and Requests All rights reserved"
