"Apple Users Beware: Rapid Password Reset Attacks on the Rise"
TL;DR
Apple users are being targeted by a new phishing attack called "MFA Bombing," which bombards victims with multiple password reset notifications in hopes of tricking them into granting access to their accounts. Attackers may also pose as Apple Support to obtain verification codes and reset passwords. While Apple has not responded to the issue, users can protect themselves by consistently selecting "Don't Allow" for reset notifications, verifying calls from Apple Support, and enabling the Apple Recovery Key for added security.
- If you're getting dozens of password reset notifications, you're being attacked AppleInsider
- Recent 'MFA Bombing' Attacks Targeting Apple Users – Krebs on Security Krebs on Security
- New password reset attack targets Apple device users - what to do if it happens to you ZDNet
- Apple users targeted by incredibly annoying 'Reset Password' attack Mashable
- Warning: Apple Users Targeted in Phishing Attack Involving Rapid Password Reset Requests MacRumors
Want the full story? Read the original reporting
Read on AppleInsider