Apple Phising Alert: Cyber criminals are now tricking Apple iMessage users into turning off the app’s in-built phishing protection. This leaves users vulnerable to fraud and scams. iMessage disables links coming from unknown numbers by default, but now cyber criminals have found a way to do so.
How are phishing attacks happening?
According to a report by Bleeping Computer, scammers are sending fake messages like USPS shipping problem or unpaid toll. These messages contain non-clickable links and users are asked to reply with “Y” to activate the link.
What is written in phishing message
“Please reply Y, then close and reopen the text message. To activate the link, copy it and open it in the Safari browser.” If users respond with “Y”, iMessage’s phishing protection is turned off, making the link clickable. Apple says that when you reply to a message or add the number to the contact list, the links given in the message become active.
Why is it dangerous?
Even if the user does not click on the link, replying to the message lets the scammer know that the number is active. With this they can send more fraudulent messages in future.
Although tech-savvy users can recognize this type of phishing attack, this method targets people who are less technically aware and believe the message to be genuine.
How to avoid such phishing attacks?
- Don’t respond to any suspicious text with “Y” or anything else.
- Use AI-based scam detectors like Norton Genie, Trend Micro ScamCheck, or Bitdefender Scamio by copying the message content.
- Block unknown numbers and don’t add unnecessary contacts to your phone.
- Keep the security settings of iMessage and other apps updated and active.
It is very important to be alert to protect against phishing attacks. Avoid responding to suspicious messages and always ensure the authenticity of any link before opening it.
Also read:
