Users who have lost or had their iPad or iPhone stolen are receiving fraudulent messages claiming that their device has been found and redirecting the user to a phishing website designed to steal their iCloud account data .
The phishing pages are even in different languages, such as English, Spanish, Italian, French, German, Portuguese, Chinese, and Russian, as reported by researchers working on the subject.
It appears that cybercriminals are trying to take advantage of Apple's " Find My iPhone" service, which allows users to locate their device through a feature called "Lost Mode."
If this feature is enabled, you can leave a message on the lock screen. Most often, a phone number is displayed so that anyone who finds the gadget can call the phone number and return the device to its owner.
Lost Mode has the ability to lock the device with a passcode entered when turning it on, but can also be disabled from the owner's iCloud account.
Security researchers from Symantec have discovered that scammers are using every detail they can find displayed on the lock screen. If they can find a phone number and email address, they can craft a more credible message.
A sample of the text that victims receive, as reported by Symantec, is the following, “Apple Inc. Your iPad Air 3G 64GB Space Gray linked to [email address found on screen] has been located today at 19:00 PDT. See location: [phishing website].”, as provided by Symantec.
