All iPhone users are being warned about a wave of new phishing emails trying to steal their account information.
Cybercriminals send fake emails claiming to be from Apple, telling users that their accounts have been suspended and prompting them to take further action.
The fraudulent email tells users to click a link to verify their account, which redirects them to another page that steals their login and two-factor authentication information.
The website requires unsuspecting victims to enter their usernames and passwords, giving hackers direct access to their digital wallets.
To make the communication seem more urgent, hackers also warn that the user only has 24 hours to verify their Apple ID or it will be permanently locked.
Hackers take advantage of people who are attracted to online Black Friday
Cyber Monday shopping deals to convince users that their Apple ID has been suspended on their iPhone.
These emails can be tricky to navigate because they look like a standard Apple Support email.
However, there are warning signs to look out for, including poor punctuation and grammar and an email domain that doesn’t end in @apple.com.
Hackers take advantage of the holidays to target Apple users with phishing emails claiming their account has been locked
“Apple will never ask you to log in to any website, or to tap Accept in the two-factor authentication dialog, or to enter your password, device passcode, or two-factor authentication code into any website,” says Apple. shared on her website.
“Phishing frauds such as the Apple ID Suspended scheme are becoming increasingly prolific and urgent,” said Jake Moore, former digital crimes law enforcement officer and now global cybersecurity advisor at ESET.
“Many people are still being manipulated by the clever tactics of criminal hackers.”
To appear credible, hackers often include your personal information, such as your name or phone number, to gain the user’s trust.
They will try to create a strong sense of urgency to discourage you from contacting Apple directly.
If users cannot recognize the warning signs in the message, “It is important to verify the sender’s email address for any discrepancies,” Moore continued.
“And avoid clicking on suspicious links, as this is where scams often begin,” he said, adding: “If you’re ever in doubt about an Apple ID issue, head straight to the official Apple website to resolve this issue.” let’s check it out.’
Apple has provided steps for retrieving your ID if it has been compromised.
“If you believe your Apple account has been compromised, or you have entered your password or other personal information on a scam website, immediately change your Apple account password and ensure two-factor authentication is enabled,” the tech giant said. on the support page.
The phishing emails require users to enter their login credentials, including two-factor authentication, to resolve the alleged problem. Instead, they steal that information to approve expenses
There’s another hack floating around that also uses fake messages to gain access to users’ iCloud.
The scam, sent via email and text messages, tells the user that there is a problem with their iCloud account and that it needs to be addressed immediately.
iCloud is a cloud-based program that allows users to store data, including images and messages, on multiple Apple devices. While an Apple ID is a private account that provides access to Apple services.
The messages may also mention that iCloud is almost full and that users can click the link for a free upgrade.
Similar to the Apple ID hack, users are asked to provide this login details before receiving the upgrade or see what the alleged urgent problem is.
And hackers use the information to take control of the victim’s account, allowing them to authorize purchases for themselves.
Users should take steps to protect their accounts and avoid scams by never sharing personal data or security information, always using two-factor authentication, and not clicking links or opening attachments from suspicious emails.
The company says it will never ask users to log into a website or enter your password or two-factor authentication code to access a site.
Apple added that if you’re not sure if an email is genuine, you should first look at the email domain to confirm if it is legitimate.
DailyMail.com has contacted Apple for comment.