Phishers weaponize Apple change alerts to push fake iPhone scams

TL;DR
A phishing campaign uses legitimate Apple account-change emails to push a fake iPhone purchase alert, embedding the scam text into user-provided Apple ID name fields so the message appears authentic; when recipients call the supplied number, they risk remote access or data theft. The emails pass SPF/DKIM/DMARC, and are delivered from Apple infrastructure, highlighting how attackers abuse legitimate features to bypass filters. Users should be wary of unexpected purchase notices and verify changes via official Apple channels.
- Apple account change alerts abused to send phishing emails BleepingComputer
- iPhone users are being targeted with a new phishing scam ConsumerAffairs
- Don't Get Scammed: Thieves Posing As Apple Support In Texts & Phone Calls, Company Warns SlashGear
- A surge in iCloud scam emails is pushing users into panic clicks Yahoo Tech
- Apple Account Change Alert Emails Exploited in New Phishing Campaign The Mac Observer
Want the full story? Read the original reporting
Read on BleepingComputer