The email message below, which claims that the recipients' Apple ID was used to sign into an untrusted device, is a phishing scam. The phishing email message is being sent by cybercriminals to trick Apple users into clicking on the link in it. The link in the email message goes to a fake Apple website that will ask visitors to sign-in. Once visitors attempt to sign into the fake website with their Apple usernames and passwords, the same information will be sent to the cybercriminals behind the phishing scam.
The "Your Apple ID was used to Sign into an Untrusted Device" Phishing Scam
From: iCloud Service <allerts-review-accounts @notification.accountsupport- suspicious-email-access-account-locked48526454236456 webappsemail mail.account.live.mail.com>
Date: September 19, 2017 at 08:59:12 GMT+1
Subject: RE : [Reminder] [ Summary Report Alert ] New Statement verify your information [ Date Update Confirmation ]
Your Apple ID was used to sign in to untrusted device.
Date and Time: 17 September 2017, 1:20 PM PST
Operating System: Windows
Browser: Chrome v.7.7.1
We need to verify your account information in order to continue using your Apple ID.
Please Verify your account information by clicking on sign in and verify your account as soon as possible.
Sincerely,
Apple Support
Copyright © 2017 Apple Inc. All rights reserved.
Once the cybercriminals have received the stolen Apple usernames and passwords, they will use it to hijack their potential victims’ Apple accounts and use them fraudulently. Therefore, Apple users who have been tricked by the phishing scam are asked to change their Apple accounts' password, check their accounts for discrepancies and contact Apple for help if any is found.
This is another reason why Apple users should never click on links in email or other messages to sign into their accounts, they should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something that needs to be done their accounts, they will be notified after signing in.