Security researchers from Malwarebytes have spotted an interesting Apple ID phishing email. Usually, when we say interesting, we mean that it relies on some clever technique to trick users, but in this case, that's not the case.
This particular email is interesting because it is so poorly designed that no one could fall for it. Some phishing emails contain "security warnings" to make the fake alerts seem legitimate.
However, in this case, the recipients have been told from the start that the email is spam. The content of the message itself appears in the middle, formatted. Then, at the end of the message, there is additional information indicating that it is spam and that it could contain a “virus.”.
The phishing email states the following:
"Dear customer,
Your Apple ID was used to sign in to iCloud from an iPhone 4.
Time: February 10, 2014
Operating system: iOS;6.0.1
If you have recently logged in from this device, you can ignore this message.
If you haven't signed in to an iPhone with your Apple ID recently and you think someone might have access to your account, click here to verify your information and change your password
As you can see, the spammers didn't even have time to change the date to a more recent one.
As Malwarebytes' Chris Boyd points out: "Sometimes crooks get it right and carry out extremely clever phishing attacks. Other times, they do something that makes you wonder what happened."
