Warning: Scam asking to reset Apple ID password

Specifically, the attacker will continuously send password reset request messages in the hope that the user will mistakenly approve. If the victim clicks on the notification and allows it, the attacker can change the Apple ID password. If the user does not give permission, the scammer will pretend to be an Apple support employee and call the victim to inform them that the user's account is being hacked and that the company needs to 're-verify'.

It's unclear how the attackers sent so many messages to Apple users, but it appears they exploited a bug in the system.

The target of this form of attack is users who own Apple devices (iPhone, Apple Watch, Mac.).

Experts recommend that users need to be wary of notifications and messages asking to reset their password. If that's not your request, select Don't allow.

One point users should note is that Apple does not make phone calls requesting password reset codes.

Attackers often use users' personal information that has been leaked on websites, or purchased through the black market, including name, address, phone number, Apple ID registration email, to attack victims. via text message or phone call.

Apple has not yet commented on this attack.

Jessica Tanner

Update 28 March 2024