By using this site, you agree to our Privacy Policy and our Terms of Use. Close

Forums - General Discussion - They almost got me

Phishing scams keep getting better

Today I got an email from service@email.appleid.com

Dear Customer,

 

Your AppIe ID was used to sign in to iCloud via a web browser. 

Date: 13 October 2017
IP Address: 36.72.14.98
From: Toronto, Canada
Browser: UC Browser

 

Is that you?

 

As our security precautions, we need more informations from you. In order to continue using your AppIe lD, you need to login and unlock your account by clicking the link below.

Your action is required to help us to protect you AppIeID account securely.

Thank you.
AppIeID


Going to the link gets you to what looks like an offical Apple site
https://slgn.appl.id.com.summary-webapp.index.common-aspxwebidmsa.com/Verify.php?

Except if you look closely sing and apple are spelled wrong. On it my alarm bell went ringing when it asked for my social insurance number and credit card details... I went to the actual apple site, confirmed 2 way verification was still on and changed my password just to be sure. They got my date of birth and address though before I caught on, I'm not paranoid enough. I should know better than to click any links in email :(

Anyway be warned, don't make the same mistake.



Around the Network

Usually scams can't spell properly, but there are some dangerous exeptions.



NEVER EVER click on a link in an email, even a genuine one. What I do if I got such a mail is I close my mail program, go to the official website myself, not through a link but by typing the correct URL myself and log there.
Trust no one, nowhere and never.

 

EDIT: the word "sign" seems to be correctly spelled in that line you copy pasted.

Also, maybe you shouldn't put that link there, someone else could be dumb enough to click on it.



I don't think this ever happened to me, even though I get a lot of emails (Facebook, Nintendo, online games I used to play...). How do scammers get people's email addresses?



Thankfully ive never fallen and hopefully never will for any of this scams

Ka-pi96 said:
SpokenTruth said:
You should probably blank out your IP address or you will get got.

I assume that's the IP address of the "fake" login attempt, rather than his actual IP.

 

And on topic, I'm completely immune to this since I don't read emails, got like 2k+ unread emails but screw them!

Just 2k? Pfft

GIT GUD, Senpai.



Around the Network

Asking for SSN and Credit Card is a dead giveaway.



Flilix said:
Usually scams can't spell properly, but there are some dangerous exeptions.

I see what you did their.



http://www.youtube.com/watch?v=F1gWECYYOSo

Please Watch/Share this video so it gets shown in Hollywood.

CrazyGamer2017 said:

NEVER EVER click on a link in an email, even a genuine one. What I do if I got such a mail is I close my mail program, go to the official website myself, not through a link but by typing the correct URL myself and log there.
Trust no one, nowhere and never.

 

EDIT: the word "sign" seems to be correctly spelled in that line you copy pasted.

Also, maybe you shouldn't put that link there, someone else could be dumb enough to click on it.

They spelled it sIgn, capital i. And yeah I usually never click on links, moment of weakness. The last few times I had to, the click here to verify your email account genuine type emails, threw me off I guess.

That linked is blocked now, turns up this

Deceptive Site!

This web page at slgn.appl.id.com.summary-webapp.index.common-aspxwebidmsa.com has been reported as a deceptive site and has been blocked based on your security preferences.

Deceptive sites are designed to trick you into doing something dangerous, like installing software, or revealing your personal information, like passwords, phone numbers or credit cards.

Entering any information on this web page may result in identity theft or other fraud.

Advisory provided by Google Safe Browsing.

I reported it as a phishing scam, others probably did too.



Mine looks like it is from my university and said I needed to update my security of my account, which my University constantly does. So I did think it was true since I decided to read the email. But something seemed a little phishy so I typed in the url that it wanted me to click on in google and found nothing, or any notification that my University was doing something like that and nothing and finally I typed in the url+ phishing? and found a match.

One of my classmates fell for something recently and had to recover his account and enable 2 way login.



Can't happen to me. I don't buy apple products.



Hunting Season is done...