A resurgence of a deceptive scheme targeting Apple users has been identified, utilizing concerns over low iCloud storage to deceive individuals into disclosing sensitive information. Apple’s cloud storage service serves as a crucial digital backup for many iPhone users, safeguarding photos, documents, and essential files from accidental loss or deletion.
While iCloud simplifies device transitions by consolidating data for iPhones, iPads, and Macs in one central location, its storage capacity is limited unless users opt for additional space by paying a monthly fee. Scammers are exploiting these limitations by inducing fear of account blockage due to full storage, prompting victims to divulge personal and financial data.
Although iCloud scams are not novel, cybersecurity experts have noted a surge in fraudulent emails alleging full storage space. Malwarebytes cautioned that scammers are leveraging the emotional appeal of potential photo loss to extract sensitive information.
The fraudulent messages, purporting to be from Apple, claim that iCloud storage is exceeded, halting file backups, and urge users to upgrade their storage plan through a link redirecting to a bogus website designed for data theft. Malwarebytes highlighted the common theme of these scams, where users are coerced to make a payment to prevent iCloud files from deletion.
To enhance user safety, new guidelines have been issued, emphasizing that Apple does not send unsolicited emails regarding iCloud storage issues. Legitimate storage alerts from Apple appear within device settings or official system notifications, not via unsolicited emails or text messages with external links. Users are advised to directly check their storage status through device settings to avoid falling victim to such scams.
Five safety rules for iCloud users include accessing accounts solely through Apple’s official platforms, refraining from sharing passwords, verifying links before clicking them, utilizing updated anti-malware software with web protection, and avoiding interaction with suspicious websites or payment requests.
