iTunes ‘virus’ scam: Only (don’t) Connect

Graham Cluley writes for ESET that Scammers claim there is a virus in Apple’s iTunes database. He’s referring to a tweet by Fujitsu’s@Bry_Campbell quoting a scammer’s claim that victim’s must ‘re-validate’ their accounts due to a ‘virus’ in the database. In order to panic victims into complying, the scam message claims that this is the second message sent by the ‘Apple admin’, and that they must re-validate their account within 72 hours or lose their account permanently.

The link in the scam message goes to a phishing site masquerading as iTunes Connect. Clearly, the intention is to harvest sensitive information.

Graham points out that:

If you receive what you believe to be a phishing email purporting to be from Apple, the company asks that you forward it to them at reportphishing@apple.com, including the message’s full header information.

David Harley