“Important Message From Apple” Phishing Scam

Outline:
“Important message” purporting to be from Apple claims that the company has added security to your Apple ID and you must click a link  to fill out a short questionnaire. The email warns that Apple could no longer guarantee the security of your account if you do not comply with the request.

Analysis:
The email is not from Apple. Instead, it is a typical phishing scam designed to steal your Apple ID, your credit card numbers, and other personally identifying information. If you click the link, you will be taken to a fraudulent website that has been designed to look like the real Apple website.

Once on the fake site, you will be asked to log in with your Apple ID and then fill in a form that requests your personal and financial information. A screenshot of the fake form is included below.

All of the information you supply will be collected by criminals and used to hijack your Apple account, commit fraudulent transactions using your credit card, and, possibly, steal your identity.

Apple phishing scams are very common. An article on the Apple website explains how to recognise and report phishing scam messages like this one.

Example:

Screenshot of the fake Apple web form:

Last updated: November 23, 2016
First published: November 23, 2016
By Brett M. Christensen
About Hoax-Slayer

References
Apple ‘Your Order Has Been Placed’ Phishing Scam
“Apple Music Membership Invoice” Phishing Scam Email
Phishing & Other Suspicious Emails