Security researchers have identified a new phishingtargeting iTunes users. The campaign relies on sending spam emails purporting to come from Apple.
The deceptive emails inform users that someone has used their account to carry out various transactions.
When users try to get informed about the alleged transactions, via an attached link, they are redirected to a cosmetics and perfume sales website. As researchers point out, it is a legitimate business whose site has been compromised and appropriately modified by cybercriminals to be used for their own benefit.
Users are then redirected to a phishing website, which mimics the real Apple, but contains several errors, which are indicated in the images with red flags.
There they are asked to fill in their personal details in order to cancel the transaction, and at the end they are redirected to the real Apple website. However it is already too late, as their details have been collected by the criminals.
For more information about the scam, you can refer to the Sophos website.
