9to5Mac shared a copy of one of the phishing emails on Tuesday, showing the subscription confirmation for services that users did not actually sign up for. Users will receive a warning in an email that they have signed up for a free trial of YouTube Red for 30 days and will be charged $ 144.99 per month once the trial is over.
The trick is to let users click on the link to unsubscribe (they have never really registered). Once they click, they will be asked to provide a series of sensitive information, from Apple ID to credit card details.
To counter such phishing attempts, Apple Inc. posted a page on its website that explains how to identify e-mail from fake App Store or iTunes Store. The following is the user needs to pay attention when they see the e-mail sent by Apple:
If you receive an email about an App Store or iTunes Store purchase, and you’re not sure whether it is real, you can look for a couple of things that can help confirm that the message is from Apple.
Genuine purchase receipts—from purchases in the App Store, iTunes Store, iBooks Store, or Apple Music—include your current billing address, which scammers are unlikely to have. You can also review your App Store, iTunes Store, iBooks Store, or Apple Music purchase history.
Emails about your App Store, iTunes Store, iBooks Store, or Apple Music purchases will never ask you to provide this information over email:
- Social Security Number
- Mother’s maiden name
- Full credit card number
- Credit card CCV code
Source: bgr
