Post

en.wikipedia.org/wiki/Social_... ;) btw, very good effort on the side of the scammers, old style con, is beyond phishing alone

Thank you for sharing this. That was a sophisticated attempt and it will work on many people. Sadly.

Have you tried contacting Apple support? You enter your phone number on their website and they call you.

the tell was the incoming phone call. in that case, you calmly state that you will look up Apple’s support telephone number on their web site and call back.

The emails were actually from Apple. All header checks would show that it's legit. The attacker filed a fake support case in the victim's name and Apple sent a legit email notifying about that support case.

All of this is true… and in this case not useful since the email for the support ticket *came from Apple* because the attacker did in fact create a real support ticket on behalf of the target.

I smell stupidity here. Two factor authentication, twice, three times? No, it's not done that way. I'm glad I don't do Apple or any big OS company. They're too big not to hack. Don't ever trust any unsolicited call. Just hang up. Delete messges.

Snide responses as expected from "Professionals" "Rookie mistakes" - fuck off you arrogant twat. 99% of people would fall for this kind of multipart phishing attempt because there are to many moving parts to juggle in a normal life.