Billions of Apple customers have been warned that they are the target of a new scam that can take over their accounts.
If you have recently received an email claiming that your Apple ID is suspended – delete it immediately. Cyber-crooks are sending eerily convincing Apple ID suspension emails to customers that have been created by AI.
AI-composed scam emails often look really close to the real thing. Artificially intelligent tools allow criminals to avoid the usual pitfalls of spelling and grammar mistakes, which consumers can use to detect a phishing email.
The email pushes recipients to click a blue button labelled ‘Go to Apple ID’. It warns that customers must verify their identity within 24 hours, or risk losing access to their account.
However, clicking the button takes unsuspecting customers to a fake website designed to steal their username, password and other personal details.
“Phishing scams like the Apple ID Suspended scheme are becoming increasingly prolific and under immediate urgency,” Jake Moore, a former digital crimes law enforcement officer and now global cybersecurity advisor at ESET, said.
"Many people are still manipulated by the clever tactics used by criminal hackers.”
Apple has asked its users to stay alert, and if something appears to be a scam, it probably is.
"If you're suspicious about an unexpected message, call, or request for personal information, such as your email address, phone number, password, security code, or money, it's safer to presume that it's a scam," Apple said.
The company added, “Apple will never ask you to log in to any website, or to tap Accept in the two-factor authentication dialog, or to provide your password, device passcode, or two-factor authentication code or to enter it into any website.
“The warning signs people need to look out for include the mention of personal information in an attempt to build trust and appear legitimate to the user. They create a strong sense of urgency and portray the problem as immediate so that the user does not contact Apple. The biggest red flag is the request for your account information or security codes.”