Those with iPhones might want to read this

[voodoopenguin]

A new phone-based phishing scam that spoofs Apple Inc. is likely to fool quite a few people. It starts with an automated call that display’s Apple’s logo, address and real phone number, warning about a data breach at the company. The scary part is that if the recipient is an iPhone user who then requests a call back from Apple’s legitimate customer support Web page, the fake call gets indexed in the iPhone’s “recent calls” list as a previous call from the legitimate Apple Support line.


https://krebsonsecurity.com/2019/01/appl...ng-better/

Paul

[freeradical]

Have you read his book Spam Nation? It's a good read. IIRC, he correctly predicted that cyber criminals would eventually become the true menace that they are today once their online pharma schemes were shut down.

[Harbourmaster]

It appears that the way this works is by spoofing the default contact card that Apple puts in your phone by default to display the call as legit, they then instruct you to call an 866 number to try and extract whatever it is that they are really phishing for. Simple solution is to delete the Contact info from Apple from your contacts and then it cannot be used in this fashion.

[Wags]

Thanks. I deleted two different Apple contacts, plus Apple Music, which was a local music store that got priced out of downtown, and a mysterious one called Apple PP.

[C(-)ris]

Nothing new here. Just caller ID spoofing. The trick is they found a number to spoof that some people have in their contacts. Could do the same thing with a bank or other number a lot of people might have in their address book.

This could be completely fixed by the telcos implementing a verification system for numbers.

[NewtonMP2100]

....read 'em.....and weep.....???

[Filliam H. Muffman]

There are people phishing local businesses over non-payment of their power bills. They use fake caller ID and set up pages online pages that are copied directly from the current power company pages, but with mis-spelled URLs. The payment options go to a different bank/account and are supposedly emptied/changed daily.

Congress really needs to crack down on fake caller ID, but they are tied up with distractions.