The email message below with the subject "Update your information" is another attempt by cybercriminals to steal their potential victims’ Apple account credentials. The fake email has links in it that go to the phishing Apple website, which steals account usernames and password. The phishing website steals account credentials by asking visitors to sign-in with their Apple account usernames and passwords. Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.
Sample of the "Apple Account Status Update" Phishing Scam
From: ID-Apple <infos-idapple4@eservices.idapple.com>
Sent: Wednesday, March 7, 2018 3:16 PM
Subject: Update your information .
Account Status Update.
Log in to your Apple as soon as possible
Hello:
Recently, there's been activity in your Apple account that seems unusual compared to your normal account activities. Please log in to Apple to confirm your identity and update card information.
We're concerned that someone is using your Apple account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.
What do I need to do?
Click here
Log in to your Apple account as soon as possible. We may ask you to confirm information you provided when you created your account to make sure you're the account holder
Yours sincerely,
Apple
Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.