'Verify Apple ID' warning to take over accounts is fake news

On April 11, many iPhone users in Vietnam encountered a situation where the device required authentication for a strange Apple ID account. On technology social networking groups, many people are interested in this topic and are worried about a cyber attack targeting iPhone users.

Immediately, many social network accounts also posted posts with the content: 'Warning corner: If you use an iPhone, suddenly the screen shows 'Apple ID verification', please click Cancel or Save later. Strange Apple ID, don't click install, there's a way to hack iPhone'.

Many social network account owners continuously share similar warning information, despite verifying this content.

According to experts, the display of 'Apple ID Verification' is real, but the risk of being hacked to take over a bank account is fake news.

Mr. Vu Ngoc Son, Technical Director of cybersecurity company NSC, said the incident occurred at the same time Apple warned iPhone users in 92 countries about the risk of targeted spyware attacks, causing many People are afraid of being hacked. However, the attack that Apple warns about has nothing to do with the 'Verify Apple ID' notification.

According to Mr. Son, the form of attack that Apple is warning about has been around for a long time, the most famous being the Pegasus malware that exploits vulnerabilities in iMessage, but only targets a small group of politicians, journalists, and journalists. social activities. While with 'Apple ID Verification' status, there have not been any related attacks recorded.

If the phone encounters the above situation, users can now click 'Save for later' to turn off notifications, and are recommended to delete apps downloaded with an Apple ID that is not theirs to avoid the above confusing notification.

Apple has not yet explained the issue of strange emails appearing in notifications.

'This fake notice was released at the same time as information from Apple warning iPhone users in more than 90 countries about targeted spyware attacks, causing many people to believe it was real. However, the attacks that Apple warns about have nothing to do with the "Verify Apple ID" notification. The form of attacking iPhone users through the vulnerabilities that Apple is warning about has been mentioned many times before, the most famous being Pegasus malware that exploits vulnerabilities in iMessage on iPhone,' Mr. Son said.

'Up to now, experts have not recorded any attacks through the display of such a "Verify Apple ID" message. Everyone needs to be very careful and should not share unverified information,' Mr. Son advised.

Previously, as VOV reported, the first trojan appeared to attack Vietnamese iOS users. This type of malware is customized to attack iPhone users with the ability to steal facial data and withdraw money from payment applications.

This Trojan is called GoldPickaxe. Hackers distributed it on the iOS operating system through the TestFligt platform - a tool created by Apple to help developers distribute unofficial (beta) applications by sending links to a number of people. users install, before being released on the AppStore for everyone. With TestFlight, developers can invite up to 10,000 testers to install their beta app.

GoldPickaxe can collect information such as SMS messages, FaceID, identification data. With this collected information, the hacker's goal is to attack and withdraw money from bank accounts, financial application.