The latest scam is targeting all those with an iPhone as hackers try to catch iPhone users off guard by imitating the tech giant and gaining access to people's Apple accounts
An urgent warning has been sent out to everyone with an iPhone after tech experts discovered a new cyberattack targeting people with Apple IDs.
Scammers are using SMS phishing techniques that send messages claiming to be from the tech giant Apple which invites users to visit a link about an "important request" about iCloud. The Californian Symantec security firm found the attack earlier this month, warning the links sent out lead to fake websites tricking people into entering their Apple ID credentials.
Apple has implemented guidelines for attacks similar to this one, urging iPhone users to use two-factor authentication which requires a password and six-digit verification code in order to get into their account from another device.
"These credentials are highly valued, providing control over devices, access to personal and financial information, and potential revenue through unauthorized purchases," Symantec shared on its website. "Additionally, Apple's strong brand reputation makes users more susceptible to trusting deceptive communications that appear to be from Apple, further enhancing the attractiveness of these targets to cyber criminals."
The American security company announced the warning on Tuesday, July 2, after it had seen a malicious SMS that read: "Apple important request iCloud: Visit signin[.]authen-connexion[.]info/iCloud to continue using your services."
Symantec even found that the scammers added CAPTCHA to the website to make it look legit, with the software used to ensure bots aren't using the website. Once completed, those using the website are taken to an outdated iCloud login template used to try and get people's Apple ID information.
Apple said on its support page for users that scammers might also ask iPhone users to disable security features such as two-factor authentication or Stolen Device Protection.
"They will claim that this is necessary to help stop an attack or to allow you to regain control of your account," the company shared. "However, they are trying to trick you into lowering your security so that they can carry out their own attack. Apple will never ask you to disable any security feature on your device or on your account."
Usually, the easiest way to spot whether a text or message is a scam is through the URL shared. While messages may look legitimate, the URL will not match Apple's website. Hackers also usually share messages that look different to the ones sent out by the tech maker.
"If you get a text message you weren't expecting and it asks you to give some personal or financial information, don't click on any links,' the Federal Trade Commission has previously warned.
"Legitimate companies won't ask for information about your account by text. If you think the message might be real, contact the company using a phone number or website you know is real. Not the information in the text message."