iCloud Phishing

There have always been phishing attacks on apple but the newest ones are very clever. Instead of telling you about a payment you’re supposed to have made, they tell you an order has shown up on your account, but because it coincides with some suspicious login attempts, it’s been cancelled.

icloud-phish-form-500

The form is obviously fake because:

  • Asks for far too much data, considering the process you are initiating.
  • Isn’t on a typical Apple-named website.
  • Isn’t using HTTPS (secure HTTP).
  • Contains un-Apple-like inconsistencies, such as saying “available only…in the US” yet giving a price in Euros.

Phishing attacks are only getting more and more clever.

https://nakedsecurity.sophos.com/2015/02/06/more-icloud-phishing-dont-get-sucked-in/

Advertisements