Apple IDs a Hacker’s Delight

Friday, June 21, 2013 @ 02:06 PM gHale


Go to any industry function and look at what people are working on as they roam the halls: iPhones and iPads. That is great news for Apple as the technology is becoming ubiquitous throughout the industry.

That is also incredible news for hackers because there is quite a bit they can do with the ID data of Apple customers. Attackers can gain access to victims’ personal information and make purchases.

RELATED STORIES
Quick Apple iOS 7 Beta Bypass
Security Advisories for BlackBerry
Mobile Security Costs Companies
BYOD Dilemma: Risky Apps

In addition, in some cases, bad guys that attempt to phish out Apple IDs also try to gain access to payment card details.

As Apple’s popularity grows, it becomes a big target for malicious cyber schemes.

In 2011, the company’s security products detected only around 1,000 daily instances in which their customers accessed Apple phishing websites, according to Kaspersky Labs. Since the beginning of 2012, the number of daily detections skyrocketed to an average of around 200,000.

On December 6, 2012, Kaspersky detected close to 1 million detections, and on May 1, 2013, over 850,000 fake apple.com detections ended up recorded.

Experts said the massive surges in cybercriminal activity are usually a result of a major Apple-related event. For instance, in December 2012, the iTunes Store launched in 56 countries worldwide, which explained the large number of phishing site detections.

Cybercriminals use various methods to lure Apple customers to phishing websites, but the most popular method comes via spam emails.

A simple “we need to verify your Apple ID” message usually does the trick. Many users don’t hesitate to click on the links contained in such notifications and once they see the website they are on looks like Apple’s legitimate site, they provide their details without giving it too much thought.

In many cases, the URLs of these websites look like the legitimate Apple domains. It’s easy for the crooks to place their phishing pages on subdomains such as “apple.com.[maliciousdomain].com.”

The most dangerous phishing scams are the ones designed to harvest financial information as well. Users can protect their Apple accounts by activating two-factor authentication.

However, if the crooks get a hold of your banking details, Apple’s security feature can’t do anything to protect you. That’s why the best thing to do is be cautious whenever you receive suspicious-looking Apple notifications.



One Response to “Apple IDs a Hacker’s Delight”

  1. […] Apple IDs a Hacker’s Delight – Cyber criminals are using phishing to try to grab Apple IDs from unsuspecting users. ‘A simple “we need to verify your Apple ID” message usually does the trick. Many users don’t hesitate to click on the links contained in such notifications[.]‘ Via ISS Source, more here. […]


Leave a Reply

You must be logged in to post a comment.