iOS users appear to be the target of a phishing scam after receiving a message purporting to come from the Hellenic Post Office (ELTA).
See also: SonicWall: Thousands of firewalls vulnerable to DoS and RCE attacks
The message received by users on iCloud and iMessage states that the shipment cannot be delivered to the user if they do not update their information.
Since yesterday, various tweets have been circulating on X from users who report that they have received a message like the one below and wonder if it really comes from ELTA.
The message comes from an unofficial email and states “The Hellenic Post parcel has arrived at the warehouse but cannot be delivered due to incomplete address information. Please confirm the address in the link within 12 hours. (Please reply Y, then exit the SMS, reopen the SMS activation link or copy the link to Safari and open it). Have a nice day, the Hellenic Post team.”
See also: Fake antivirus programs used in phishing attacks
Of course, upon closer inspection, it is more than obvious that the message is a scam, as it has spelling errors and tries to redirect you to a domain (gr.geri-post.top/track) that definitely does not belong to the Hellenic Post. Also, as some users point out, the message has also gone to people who are not expecting a package from the company.
Always follow the tips below to stay safe:
1. Do not open emails/messages from strangers: These emails may contain malicious links or attachments.
2. Avoid links in suspicious emails/messages: Even if the email appears to come from a known source, double-check the URL before clicking.
3. Always check the sender of the message/email
4. Never give out your personal information via email/message: No company/organization will ask you for your personal information via email/message.
Stay tuned, we will update you with the latest on the phishing scam that uses ELTA to target iOS users!
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
