Online Threat Alerts (OTA) - Alerting you to scams and frauds.
The fake email message below which claims that the recipients' Apple IDs were used to sign into iCloud via a web browser is a phishing scam. The fake email has links in it that go to a phishing Apple website which steals account usernames and password. The phishing website steals account credentials by asking visitors to sign-in with their Apple account usernames and passwords. Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.
From: "apple@id.applemail.com" <noreply-costumerserviceidapple074293023@live.co.uk>Date: September 22, 2017 at 12:26:34 PM PDTSubject: [Apple Report] Your Apple ID was used to sign in to iCloud via a web browserAppleDear Client,We detected that someone logged into your Apple ID from an unknown device.Thats why as a security measure we have to block your Apple ID to keep you safe from unauthorised activities.Was that you?Device : Mozilla/5.0 (Macintoshs; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0IP : 185.12.45.110Location : Swivice- ss.if not please review this activity as soon as possible by completing some detail restore full access to your account.Your account will be locked if we didn't receive any response from you in more than twenty four hours.Sincerely,Apple Support
From: "apple@id.applemail.com" <noreply-costumerserviceidapple074293023@live.co.uk>
Date: September 22, 2017 at 12:26:34 PM PDT
Subject: [Apple Report] Your Apple ID was used to sign in to iCloud via a web browser
Apple
Dear Client,
We detected that someone logged into your Apple ID from an unknown device.
Thats why as a security measure we have to block your Apple ID to keep you safe from unauthorised activities.
Was that you?
Device : Mozilla/5.0 (Macintoshs; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
IP : 185.12.45.110
Location : Swivice- ss.
if not please review this activity as soon as possible by completing some detail restore full access to your account.
Your account will be locked if we didn't receive any response from you in more than twenty four hours.
Sincerely,
Apple Support
Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
11
Here is another scam:"Da: Apple Service Inviato: mercoledì 7 novembre 2018 17:38Oggetto: RE: [Information Update] Service Center: We sent an e-mail from Apple for a request to reset your password. [ID: 87320127] [FWD] Your Apple ID was used to log in to iCloud from your web browser.Date and time: November 07, 2018.Browser: Google ChromeOperating system: MacOSI have never logged into iCloud recently, and someone has illegally registered in your accountIf you think you are using it, reset your password with your Apple ID.Please see the attached PDF format.Thank you in the future.iCIoud Support"
This scam is still circulating as at 14 Aug 2018
Here’s what I got. I almost did it but then I did a search. I’m glad I didn’t finish letting the link load:"Dear Client,Your Aρρlе ID (x*x) was used to sign in to iCloud on an Opera.Time and Date: 21/07/2018 10.08.07Operating System: Windows XPCountry: GermanyIf you have not recently signed in to an Opera with your Aρρlе ID and believe someone may have accessed your Apple account, please sign in and complete the steps to confim your identity and recent activity. To help protect your account access will remain locked until you complete the necessary steps.Sign in"
Here is another scam:-----Original Message-----From: Apple Sent: Tue, Jul 3, 2018 6:13 amSubject: ACCOUNT ALERT : Your account was used to sign in to iCloud on an SeaMonkey Dear, Your Apple ID () was used to sign in to iCloud on an SeaMonkey.Date and Time: 2018.07.03. 13:13:08If the information above looks familiar, you can ignore this message. If you have not recently signed in to an SeaMonkey with your Apple ID and believe someone may have accessed your account, Please Click link bellow :Continue>Apple Support
What if one clicked on the link & responded?
You need to change your password immediately.
Here is another scam:"From: Apple Date: February 24, 2018 at 8:01:25 AM PSTSubject: Recently Your Apple ID was used to sign in to iCloud on an iPhone XDear,Recently Your Apple ID was used to sign in to iCloud on an iPhone X. Login Detail :Location : United Kingdom (UK)IP Address : 109.147.175.224Browser : Safari 11 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36Operating System : IOSYour ID will remain Locked Till until you resolve this issue.Login Apple"
Here is another scam:---------- Forwarded message ----------From: App Store Date: Nov 24, 2017 8:13 AMSubject: Alert: Your Apple Account was Iogged into iCloud from an unknown browser ( 24 November 2017 07:45 am )There Has Been a Purchase From An Unknown Device Recently, to prevent fraud we need you to verify your account.Read your secure message by opening the attachment (pdf). you will be prompted to open (Press Verify Your Account Now) the file or save (download) it to your computer. for the best results, save the file first, then open it in a Web browser. Sincerely,- Apple SupportCopyright © 2017 Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland.
Here is another scam:"Från: I-Cloud Datum: 8 oktober 2017 18:13:29 EESTÄmne: Re: [Security AppleID] : Reset Account [ref:fMMbnXOFg._SscKsEHQ3V]Dear,For your protection, your...AppIe...lD is automatically disabled.Your...Apple...ID ,has been used to sign in to iCloud...via a web browser. Current Access Location : From ( IP - 222.211.205.0192 : Shanghai Shi , CHINA ) Date and Time : October 08, 2017, ( 6:05 AM PDT ) Browser : Mozilla/5.0 (Windows NT 6.1; rv:29.0) Gecko/20100101 Firefox/29.0What can i do?Update account information Using Apple log in the list of auction or websiteWhat to do next?To restore...access ( My Scure Apple) please click the link below to validate...your...information this process should only take you a few minutes to complete. My Scure ApplePlease do not reply to this email. This mailbox is not monitored and you will not receive a response. For help, log in to your Apple account and click Help on any Apple page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your Apple account, go to your Profile and click My Settings."
Here is another scam:"From: Apple services_vND3V89K-vND3V89K.softonic.comDate: 29 Sep 2017 4:09 p.m.Subject: [Important] - Suspicious activity in your Apple account, update your Apple ID account.Dear,Your Apple ID () w?as used to sign in to iCloud via a web browser. Date and Time : Friday, 29 Sep 2017, 16:21 AMBrowser: Opera MiniOperating System: iPhone 7Location: Holy See (Vatican City State) ( 11.31.17.78 )If the information above looks familar, you can ignore this messageIf you have not signed in to iCloud recenlty and believe someone may have accessed your account, go to AppleID (https://appleid.apple.com) and update your Apple ID as soon as possible.Apple Support"
Here is another scam:"From: AppleSupport email-access-account-lockedd19027898900022webappsemailmail .account.live.mail.com>Date: September 23, 2017 at 7:21:10 AM PDTSubject: Re : ALERTS : [ Summary User Control ] Statement NEW LOGIN FROM MOZILLA FIREFOX ON SEPT 2017 . Recovery Your AccountVervication your Account Informations!Dear Customer,Your Apple ID was used to sign in to iCloud via a web browser. Browser: Chrome Operating System: Windows Country : Singapore If the information above looks familiar,you can disregard this email. If you have not singed in to iCloud recently and believe someone may have accesed your account. Your account has been locked for due to illegal activity, plase vervication your accountVERVICATION YOUR ACCOUNTThank you for your comprehension.Apple Support Team."