Categories

Phishing scam targets Apple users in the midst of big iPhone event

Today is a big day for Apple and their millions of users worldwide who are waiting to hear about the latest features for the new iPhone.

The Cupertino-based company was set to unveil what many hope to be big additions in order to stay in the game and compete against Android.

Meanwhile, the bad guys seem to be more interested in robbing Apple users than rejoicing about the big news of the iPhone 5S.

Phishing emails are being sent en masse to harvest people’s Apple ID. The emails contain links to external phishing websites:

MyApple_ID

But that’s not all. They go even one step further to steal credit card, social security number, date of birth, and more:

myInfo

Other than the URL in the address bar the pages look authentic and high quality. But with a few minutes of googling, I was able to find the original phishing toolkit hosted on a compromised Joomla! website:

hacked

The archive Apple.zip can then be extracted on any website and used as a phishing landing page:

kitThe nice thing about collecting the toolkit is that we can see server-side files that sometimes give us more information about the perpetrators:

server

The above PHP code grabs all the user’s credentials and sends them off to a @hotmail.fr email address.

We don’t often see too many attacks targeting Apple users but with a growing market share it only makes sense.

If you ever receive an email urging to update your Apple information be very wary of it. The best thing to do if you are not sure how to proceed is to directly contact Apple via their live chat or phone support.

Other than that, cheers to some cool features coming up for the iPhone 5S!


Jerome Segura (@jeromesegura) is Senior Security Researcher at Malwarebytes.


One thought on “Phishing scam targets Apple users in the midst of big iPhone event

  1. Sadie Burges says on December 8, 2013 at 9:55 am :

    I have had several people get in touch to ask me recently about purchasing Apple products from China. I would like to provide some clarity and give you guys some cautionary advice.

    “Buy 2 Get 1 Free”, “Spend over $500 and get a free iPad Air” for example.
    OK I have seen a lot of this recently – These ARE scams. 100% Fact. Trust me.

    Apple do have their products made in China but the fact is….READ MORE
    http://www.ebay.co.uk/gds/Apple-Products-from-China-Avoid-Getting-Scammed-/10000000177962598/g.html

Leave a Reply

Subscribe to our YouTube Channel