A malicious email, claiming to be from Apple, informs the recipient that a purchase has been made at the Apple store and prompts the recipient to log in again to cancel the purchase, leading them to a phishing.
In contrast to most Apple phishing emails we have seen, in this case the actors are not trying to steal the recipient's Apple identity, but to obtain banking information that could be used to make purchases on the Internet.
According to Hoax Slayer, the email informs that the TomTom navigation app has been purchased by Apple, but the process can be reversed by simply visiting the link provided.
By selecting the URL, the potential victim is directed to a page that mimics a cancellation form from Apple, requesting sensitive information such as the type of card belonging to the user, the name of the issuing bank, the card number, the expiration date, and the CVV code (card verification value).
In addition, the personal details that include name, date of birth, billing address, city and postal code appear as mandatory fields in the form that the user must fill out.
Having all this data, someone could purchase goods from online shops in the name of the legitimate owner.
