Cloud Support Team Email Scam

Common Red Flags

• Urgent or Threatening Language: Claims your storage is full, your account is disabled, or your photos will be "permanently deleted" if you don't act immediately.
• Generic Greetings: Uses phrases like "Dear User" or "Dear Customer" instead of your actual name.
• Suspicious Sender Address: The "From" name may say "Cloud Support," but the actual email address is often unrelated or from a suspicious domain (e.g., @rambler.ru or ends in .boats).
• Mismatched Branding: For example, an email with an iCloud subject line but a Google Cloud logo.
• Suspicious Links: Hovering over buttons reveals URLs that don't match the official provider's website.

If You Receive One

1. Do Not Click Links: Avoid clicking any buttons, links, or attachments in the email.
2. Verify Directly: Log in to your cloud account through the official app or website (e.g., icloud.com or one.google.com) to check your storage status.
3. Report the Phishing:
   • Apple: Forward suspicious emails to reportphishing@apple.com.
   • Google: Use the "Report Phishing" option in the Gmail menu.
   • General: Forward to the Anti-Phishing Working Group at reportphishing@apwg.org.
4. Delete and Block: Once reported, delete the email and block the sender.

Already Provided Info?

• Change Passwords: Immediately update your password for the cloud service and any other accounts using the same one.
• Enable MFA: Turn on Multi-Factor Authentication (MFA) to add an extra layer of security.
• Contact Your Bank: If you entered credit card details, call your bank immediately to freeze your card and report fraudulent activity.
• Monitor Accounts: Watch for unauthorized logins or changes to your account settings.