Pretty good scam - almost got me...

[richorlin]

I got this email today:

WTF? I don't remember subscribing to Pandora. Maybe I did, it was a year ago. Well, I don't want, not for $100, so I click on the "unsubscribe link, log into my iCloud account and get an "Apple" form asking for my name address and among other things, my Soc Sec number. THAT'S when the alarm bell sounded.
I checked the sender's email address and it was an edu addee, so I immediately closed the window, changed my iCloud password and figured that's that. I logged back into iCloud & iTunes and checked but there were no subscriptions charged to me.

This can show how compalcent we can get. I shgould have checked my iTumnes/iCloud account first. But, you got to admit that it does look very realisitic and I'l bet a lot of people fall for it. The Soc Sec number request is what rang my alarm bell, but all lot of people would have gone ahead and entered their's.

Just be careful out there.

[mikebw]

Thanks for sharing. Did you FWD to Apple too? https://support.apple.com/en-us/HT204759

[jdc]

richorlin wrote:
I checked the sender's email address...

Ive implanted this into my families head a million times over. Ive shown them all how to check the senders email.

Along with telling them 99.9999999% of the time its a scam, I tell them if they arent sure, always check this first.

[cbelt3]

Yeah, I'm embarrassed to say I got nailed by a phishing attack using Apple earlier this year. Then ran around changing my iTunes / Apple login. Stupid me !

[N-OS X-tasy!]

Apple would never identify themselves as "Apple™."

[Lux Interior]

jdc wrote:
Along with telling them 99.9999999% of the time its a scam, I tell them if they arent sure, always check this first.

Yeah, but 0.00000001% of those Nigerian princes are real!

[space-time]

If they didn't ask for your SSN, you could have "cancelled" and they they had your iCloud password (which you typed in into their web site).


Idiots. They wanted too much.

[richorlin]

space-time wrote:
If they didn't ask for your SSN, you could have "cancelled" and they they had your iCloud password (which you typed in into their web site).


Idiots. They wanted too much.

Yeah. Then they could have bought several hundred iTunes cards.

[Speedy]

No tax is also a flag unless you live in one of the few states that don't have a sales tax.

[RAMd®d]

I don't ever recall seeing dual Apples on their email.

I almost got bit by the 'a new iPhone as been added to your account, from Brazil..' bug.

In my case, the email was address to Customer. Checking the sender's address showed me the almost error of my ways.

So did rich's phishers glean his email address from somewhere or was it robo shotgun approach.