{"id":6750,"date":"2014-11-03T11:45:14","date_gmt":"2014-11-03T09:45:14","guid":{"rendered":"http:\/\/blogs.sun.ac.za\/it\/?p=6750"},"modified":"2016-01-18T14:54:08","modified_gmt":"2016-01-18T12:54:08","slug":"phishing-scam-warning-your-apple-profile-suspension","status":"publish","type":"post","link":"https:\/\/blogs.sun.ac.za\/it\/2014\/11\/phishing-scam-warning-your-apple-profile-suspension\/","title":{"rendered":"<!--:en-->Phishing scam warning: Your Apple Profile Suspension<!--:-->"},"content":{"rendered":"<p><!--:en--><\/p>\n<p>Scammers have trawled the university web pages and perhaps even obtained e-mail addresses via compromised computers within the university, and are using these stolen addresses to create a phishing scam that can be dangerous, if you respond, especially if you have an Apple device and use iCloud etc.<\/p>\n<p>The Subject will be \u201cYour Apple Profile Suspension\u201d (Notice the use of capitals for each word, already a sign that something is not right\u2026)<\/p>\n<p>Below is an example of such a mail. Do not respond to this mail, click on any of the links and fill in any details, on any page you might be directed to. This is a scam and you should firstly add the sender to your Blacklist, blacklist the subject line and consign the mail to your junkmail folder.<\/p>\n<p>Here is the mail with the dangerous stuff filtered out, just in case you like clicking on links!&#8230;<\/p>\n<p><strong>From:<\/strong> Apple Accounts [<a href=\"mailto:stolenaddress@sun.ac.za\">mailto:hackedaddress@sun.ac.za<\/a>]<br \/> <strong>Sent:<\/strong> Friday, 31 October 2014 17:36<br \/> <strong>To:<\/strong> Stolen US Adress, AN &lt;<a href=\"mailto:stolenaddress@sun.ac.za\">stolenaddress@sun.ac.za<\/a>&gt;<br \/> <strong>Subject:<\/strong> Your Apple Profile Suspension<\/p>\n<table>\n<tbody>\n<tr>\n<td>\n<table>\n<tbody>\n<tr>\n<td>\n<p>Dear <a href=\"mailto:stolenaddress@sun.ac.za\">stolenaddress@sun.ac.za<\/a><\/p>\n<p>This email is to to inform you we regret to announce you that your Apple Account (<a href=\"mailto:stolenaddress@sun.ac.za\">stolenaddress@sun.ac.za<\/a>) has been temporarily locked until we can certify your Apple ID details on file. This security measure to safeguard your iCloud Account from unapproved usage. We apologise for any inconvenience.<br \/> <strong>How do I validate my Apple ID and unsuspended my Apple ID?<\/strong><br \/> Just click the link below to verify ownership of your Apple ID. Log-in in using your iCloud Account and password, then read the instructions.<a href=\"http:\/\/blogs.sun.ac.za\/gergablog\/2013\/03\/18\/attack-vectors-getting-in-through-the-back-door\/\">&gt;&gt; Validate My Apple\/iCloud Account<\/a><\/p>\n<p>When using Apple devices and services, you\u2019ll still sign in with your usual email account as your Apple login.<\/p>\n<p>If you have questions or want support, visit the\u00a0<a href=\"http:\/\/blogs.sun.ac.za\/gergablog\/2013\/03\/18\/attack-vectors-getting-in-through-the-back-door\/\">Apple ID Support site<\/a>.<\/p>\n<p>Kind Regards,<br \/> Apple Identity Verification<\/p>\n<p>Resolution ID: #H8MND945-ID129<\/p>\n<table>\n<tbody>\n<tr>\n<td><a href=\"http:\/\/blogs.sun.ac.za\/gergablog\/2013\/03\/18\/attack-vectors-getting-in-through-the-back-door\/\">Apple Account<\/a>\u00a0|\u00a0<a href=\"http:\/\/blogs.sun.ac.za\/gergablog\/2013\/03\/18\/attack-vectors-getting-in-through-the-back-door\/\">Support<\/a>\u00a0|\u00a0<a href=\"http:\/\/blogs.sun.ac.za\/gergablog\/2013\/03\/18\/attack-vectors-getting-in-through-the-back-door\/\">Privacy Policy<\/a>\u00a0| <a href=\"http:\/\/blogs.sun.ac.za\/gergablog\/2013\/03\/18\/attack-vectors-getting-in-through-the-back-door\/\">Manage Subscriptions<\/a><\/td>\n<\/tr>\n<tr>\n<td>Copyright \u00a9 2014\u00a0iTunes Sarl 88-27, Rue Sainte Zithe, L-410810\u00a0Luxembourg\u200e\u00a0All Rights Reserved.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p style=\"text-align: right;\">[INFORMATION SUPPLIED BY DAVID WILES]<\/p>\n<p><!--:--><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Scammers have trawled the university web pages and perhaps even obtained e-mail addresses via compromised computers within the university, and are using these stolen addresses to create a phishing scam that can be dangerous, if you respond, especially if you have an Apple device and use iCloud etc. The Subject will be \u201cYour Apple Profile [&hellip;]<\/p>\n","protected":false},"author":259,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20382,29187],"tags":[],"class_list":["post-6750","post","type-post","status-publish","format-standard","hentry","category-email","category-security-2"],"publishpress_future_action":{"enabled":false,"date":"2026-05-08 04:01:15","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/6750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=6750"}],"version-history":[{"count":5,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/6750\/revisions"}],"predecessor-version":[{"id":9225,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/6750\/revisions\/9225"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=6750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=6750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=6750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}