Some Apple users are Dear Utol (2025): Itch Follows Episode 23reportedly being targeted by a sophisticated attack, requesting them to hand over their Apple ID credentials over and over again.
According to KrebsonSecurity, the attack starts with unsuspecting Apple device owners getting dozens of system-level messages, prompting them to reset their Apple ID password. If that fails, a person pretending to be an Apple employee will call the victim and try to convince them into handing over their password.
SEE ALSO: Apple confirms dates for WWDC 2024This is exactly what happened to entrepreneur Parth Patel, who described their experience on Twitter/X. First, all of Patel's Apple devices, including their iPhone, Watch, and MacBook, started displaying the "Reset Password" notifications. After Patel clicked "Don't Allow" to more than one hundred requests, the fake Apple Support called, spoofing the caller ID of Apple's official Apple Support line. The fraudster Apple employee actually knew a lot of Patel's real data, including email, address, and phone number, but they got their name wrong, which had confirmed Patel's suspicions that they were under attack.
This Tweet is currently unavailable. It might be loading or has been removed.
While the attack was ultimately unsuccessful in this example, it's easy to imagine it working. The victim might accidentally allow the password reset (mistakes are easy to happen when you have to click on something hundreds of times), or they could fall for the fairly convincing, fake Apple Support call.
Patel's example isn't isolated, either; KrebsonSecurity has details on a very similar attack that happened to a crypto hedge fund owner identified by his first name, Chris, as well as a security researcher identified as Ken. In Chris' example, the attack persisted for several days, and also ended with a fake Apple Support call.
How did the attackers know all the data needed to perform the attack, and how did they manage to send system-level alerts to the victims' phones? According to KrebsonSecurity, the hackers likely had to get a hold of the victim's email address and phone number, associated with their Apple ID. Then they used an Apple ID password reset form, that requires an email or phone number, alongside a CAPTCHA, to send the system-level, password reset prompts. They also likely used a website called PeopleDataLabs to get information on both the victim and Apple employees they impersonated.
But there could also be a bug in Apple's systems, which should in theory be designed not to allow someone to abuse the password reset form and send dozens of requests in a short period of time (Apple did not respond to KrebsonSecurity's request for comment).
It appears that there's no easy or foolproof way to protect oneself from such an attack at this time, save from changing one's Apple ID credentials and tying them to a new number and email. It's hard to tell how widespread this attack is, but Apple users should be vigilant and triple-check the authenticity of any password reset request, even if it appears to come from Apple itself.
For on spammers and scammers, check out Mashable's series Scammed, where we help you navigate a connected world that’s out for your money, your information, or just your attention.
Topics Apple Cybersecurity
AMD Radeon RX 550 + Intel Pentium G4560
Stop creating cutesy buzzwords for asshole online dating behavior
'Slings & Arrows' is the best show you can binge in a weekend
Don't look down: These slacklining photos will give you full
Every MCU movie villain ranked, from "Iron Man" to "Thunderbolts*"
Japan has officially recognised a same
Taco Squirrel managed to drag a hardshell taco up a tree
Netflix finally offers option to disable autoplay previews
NYT mini crossword answers for May 9, 2025
Hillary Clinton reveals her favorite meme on the internet
The fat bears are already extremely fat
You simply must see these celebrities lose themselves during Eminem's Oscars performance
'The Daily Show' skewers Ivanka Trump with the #Ivanktionary
'The worst recipe
Put Me In, Coach!
'The Daily Show' skewers Ivanka Trump with the #Ivanktionary
Netflix’s enticing ‘Locke & Key’ adaption is a fresh take on the beloved comic book series
'Parasite' wins Best Picture at the 2020 Oscars
SpaceX's Starlink satellite launch in pictures
The 'Will Now Have Stories' meme is here to bash Facebook
Pleasure Principles: An Interview with Carmen Maria MachadoStaff Picks: Fat Ladies, Flowers, and Faraway Lands by The Paris ReviewGoogle Street View mapped 2 Sydney boat rides past iconic Australian landmarksBlack Friday Fire TV deals 2023: Amazon's sale is liveiPhone 15, Samsung Galaxy Z Fold 5, and more got tested for 5G speed. Which one did the best?Samuel Beckett's Sitcom PitchesJonathan Franzen Says NoBlack Friday Fire TV deals 2023: Amazon's sale is liveThelonious Monk and MeMerce Cunningham’s Legacy PlanPleasure Principles: An Interview with Carmen Maria MachadoExplaining corecore, TikTok's newest aestheticA Trailer for Jem Cohen’s ‘ChuckWriting a Memoir of Difficult WomenBryan Lee O'Malley on the death of Scott PilgrimI Read ‘Playboy’ for the ComixTravel Snapshots from an OdysseyChatGPT essays and more: How teachers and schools are dealing with AI writing35+ headphone deals from Amazon's Black Friday sale'Thanksgiving' review: Eli Roth's latest is a gore snore The Airless, Lacquered Perfection of Steely Dan’s “Gaucho” This recipe for air frying your Brussels sprouts is essential It's 2022 and we're all horny for Martha Stewart Beautiful Animal of the King: Zarafa’s Long Walk to Paris What do intimate washes do to our vaginas? Sitting Up: A Brief History of Chairs Google Halloween search trend report: Michael Myers, Jell An Historic Minivan Come Now: The Impotence Trials of Pre 'All Dirt Roads Taste of Salt' review: Raven Jackson's feature Wordle today: The answer and hints for November 2 Monsters for Grownups: Learning About Our Reptilian Overlords Dying on the Toilet: On Francis Bacon’s “Triptych May–June 1973” 'The Last of Us' Season 2 to begin production in early 2024 Merritt Tierce on the Defunct Language of Nautical Flags TikTok news whiz V Spehar tells us what's on their For You Page Remembering the Sag Harbor Cinema Being Seymour Glass: Why I Borrowed a Name from Salinger How to watch Tennessee vs. UConn football without cable: kickoff time, streaming deals, and more What Ever Happened to Biosphere 2?
2.2899s , 8224 kb
Copyright © 2025 Powered by 【Dear Utol (2025): Itch Follows Episode 23】,Inspiration Information Network