Post

Sophisticated phishing attack: medium.com/@eric.moret/...

The fact that this author almost fell for this is proof he is NOT as security conscious as he thinks he is. Did he read the email header details in full? Not the sender address but the header. The the obvious non-Apple URL that he clicked on. Sophisticated? Sure. But he failed basic security checks.

The emails he got were *actually* from Apple.

Apple uses DMARC and DKIM to ensure that their domains cannot be spoofed. These allow recipient email providers to properly identify the source of the emails. Reading the email headers (not the address but the headers, if you don't know what this is...Google is your friend) would make this clear.