Cybercriminals are sending out fake "Apple New sign on iOS and macOS" emails like the one below, which claim that the recipients' Apple IDs were used to sign in from a foreign country. The fake email has links in it that go to a fake and phishing Apple website which steals account usernames and password. The phishing website steals account credentials by asking visitors to sign-in with their Apple account usernames and passwords. Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.
An "Apple New sign on iOS and macOS" Phishing Email
From: iCIoud [email@example.com]
Sent: Monday, May 13, 2019 4:07 PM
Subject: Notification : New sign on iOS and macOS May 13, 2019, 9:07 pm
Your iCloud account has just been used on iOS and macOS.
IP : 878.447.712.928
Country : VENEZUELA
Device : IPHONE 7+
Browser : Safari
If you do this, everything is OK.
If not, please use this link to stop sharing, and create a new password.
Have a nice day!
Apple Inc. © 2019
Replies sent to this email cann
Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.